Chat now with support
Chat with Support

Identity Manager 9.1.2 - Administration Guide for Integration with OneLogin Cloud Directory

Integration with OneLogin Cloud Directory Synchronizing a OneLogin domain
Setting up initial synchronization with a OneLogin domain Customizing the synchronization configuration Running synchronization Tasks following synchronization Troubleshooting Ignoring data error in synchronization Pausing handling of target system specific processes (Offline mode)
Managing OneLogin user accounts and employees Managing memberships in OneLogin roles Login information for OneLogin user accounts Mapping OneLogin objects in One Identity Manager
OneLogin domains OneLogin user accounts OneLogin applications OneLogin roles OneLogin authentication methods OneLogin service providers OneLogin clients OneLogin scopes OneLogin policies OneLogin groups OneLogin privileges OneLogin custom user fields Reports about OneLogin objects
Handling of OneLogin objects in the Web Portal Base data for OneLogin domains Configuration parameters for managing OneLogin domains Default template for OneLogin domains Editing OneLogin system objects OneLogin connector settings

OneLogin domains

OneLogin domains are added as base objects for the synchronization in One Identity Manager. A domain represents the target system for synchronizing with OneLogin. They are used to configure provisioning processes, automatic assignment of employees to user accounts, and to pass down OneLogin roles and OneLogin applications to user accounts.

NOTE: One Identity Manager sets up the domains in the Synchronization Editor database.

Related topics

Creating OneLogin domains

NOTE: If you use a default project template, the Synchronization Editor sets up the domains in the One Identity Manager database. If necessary, domains can also be created in the Manager.

To create a OneLogin domain

  1. In the Manager, select the OneLogin > Domains category.

  2. Click in the result list.

  3. On the main data form, edit the main data for the domain.

  4. Save the changes.
Related topics

Editing main data of OneLogin domains

NOTE: One Identity Manager sets up the domains in the Synchronization Editor database.

To edit main data of a OneLogin domain

  1. In the Manager, select the OneLogin > Domains category.

  2. Select the domain in the result list.

  3. Select the Change main data task.

  4. Edit the domain's main data.

  5. Save the changes.
Related topics

General main data for OneLogin domains

Enter the following data on the General tab.

Table 17: General main data of a domain
Property Description

Domain

Name of OneLogin the domain. This corresponds to the <subdomain> part of the DNS name.

Display name

Name used to display the domain in the user interface. This is preset with the domain name; however, the display name can be changed.

DNS name

Full DNS name.

Example:

<subdomain>.onelogin.com

Account definition (initial)

Initial account definition for creating user accounts. This account definition is used if automatic assignment of employees to user accounts is used for this domain and if user accounts are to be created that are already managed (Linked configured). The account definition's default manage level is applied.

User accounts are only linked to the employee (Linked) if no account definition is given. This is the case on initial synchronization, for example.

Target system managers

Application role in which target system managers are specified for the domain. Target system managers only edit the objects from domains that are assigned to them. Therefore, each domain can have a different target system manager assigned to it.

Select the One Identity Manager application role whose members are responsible for administration of this domain. Use the button to add a new application role.

Synchronized by

Type of synchronization through which the data is synchronized between the domain and One Identity Manager. You can no longer change the synchronization type once objects for these domains are present in One Identity Manager.

If you create a domain with the Synchronization Editor, One Identity Manager is used.

Table 18: Permitted values
Value Synchronization by Provisioned by

One Identity Manager

OneLogin connector

OneLogin connector

No synchronization

None

None

NOTE: If you select No synchronization, you can define custom processes to exchange data between One Identity Manager and the target system.

Description

Text field for additional explanation.

Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating