Egnyte Single Sign-On (SSO) Installation for OneLogin

Transcription

1 Egnyte Single Sign-On (SSO) Installation for OneLogin To set up Egnyte so employees can log in using SSO, follow the steps below to configure OneLogin and Egnyte to work with each other. 1. Set up OneLogin for Egnyte 2. Configure Egnyte Settings for OneLogin 3. Import Users into Egnyte Set up OneLogin for Egnyte 1. Navigate to the OneLogin website and log in. Go to Apps Add App Find apps 2. Enter Egnyte into the search box, then click on add 3. Choose the SAML 2.0 option for the Connector Version setting and click Continue. 4. Navigate to the Configuration tab and enter your Egnyte account name, then click Update. (Example: if your account is acme.egnyte.com, enter only acme) 5. Navigate to Parameters tab and choose Configured by admin option of the Credentials setting 6. When configuring Egnyte SAML Settings in the next section, you will need to copy the SAML Issuer URL and paste it into the IdP Entity ID field under Egnyte settings. You will also need to copy the SAML 2.0 Endpoint URL and paste it into the IdP login URL under Egnyte SSO settings. You may want to copy & save these now so you can paste them in later. 7. Click Save on the OneLogin site by Egnyte Inc. All rights reserved. 1

2 8. When configuring Egnyte settings in the next section, you will need to Oauth with Egnyte API from OneLogin. Navigate to Configuration API Connection and click on Authenticate 9. Click on the Egnyte link in the popup to start the auth flow by Egnyte Inc. All rights reserved. 2

3 10. When configuring Egnyte settings in the next section, you will also need to enter your SAML certificate. 11. To locate your certificate, navigate to SSO SAML2.0 and click on View Details to open up the certificate window 12. Copy your SAML certificate from the x.509 certificate field, DO NOT include -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- You will need to paste this into step 9 under the Configure Egnyte Settings section by Egnyte Inc. All rights reserved. 3

4 Configure Egnyte Settings 1. Log into your Egnyte account through the web browser. 2. Navigate to Settings Security & Authentication (SSO) 3. Select SAML (SSO) in the dropdown 4. Choose onelogin in the IdP Name dropdown. 5. In IdP Login URL, paste your SAML Login URL from step 7 under OneLogin Setup 6. In IdP entity ID, paste your SAML 2.0 Endpoint URL from step 7 under OneLogin Setup. 7. Under SAML Certificate, paste the certificate that you copied from step 12 under OneLogin Setup 8. Click on Save by Egnyte Inc. All rights reserved. 4

5 Import Your Users 1. Log into Egnyte through the web browser, then navigate to Settings Users & Groups Power Users 2. Click the Import button. 3. Download the sample user provisioning CSV file by clicking on the Download Sample File button on the import dialog by Egnyte Inc. All rights reserved. 5

6 4. Open the downloaded CSV file in Microsoft Excel and fill out the columns with the following values: Here s an example of how it will look: Note: Periods (. ), underscores ( _ ), and hyphens ( - ) can be placed in usernames; however, usernames cannot begin with these symbols, nor can a username end with a period. 5. Save the file, making sure it remains in CSV format. 6. Upload the file to Egnyte by clicking on Choose File in the Import Users dialog and selecting the file you just saved. 7. Select the checkbox Allow the creation of new users if you are using the spreadsheet to create new employee accounts in Egnyte. If your employees already have accounts in Egnyte and you are now allowing them to have SSO access, select Allow updating of existing users. When updating existing employees, you will need to complete only three columns (Username, AuthType, and IdPUserID); the rest can be left blank. 8. Click the button Import and wait for the confirmation that indicates your user import has completed 9. Test the setup by logging out of your Egnyte account. You should now see a different login page that now includes a single sign-on option on the right. Click the Login button on the right and you should be redirected to your SSO provider. Log in. You should be redirected to your Egnyte domain. Additional questions? Contact our Support Team by Egnyte Inc. All rights reserved. 6