SureAccess Login with OneLogin
This guide focuses specifically on configuring SureAccess as a secure VPN gateway using OneLogin for authentication. In this setup, the OneLogin screen acts as the "gatekeeper" that users must pass through to establish a secure VPN tunnel to corporate resources.
The integration process consists of two main steps:
Configure OneLogin for SAML Integration
Configure SureAccess Authentication Type in SureMDM
Configure OneLogin for SAML Integration
To configure settings on the OneLogin server, follow these steps:
Login to the OneLogin Admin Portal using your administrator credentials.
Navigate to Applications > Add Apps.
In the search bar, type SAML Custom Connector (Advanced) 2.0 and select it from the results.
Enter a display name (e.g., SureAccess) and click Save.
Navigate to the Configuration tab and enter the following details:
Audience (EntityID): urn:42gears:suremdm:SAML2ServiceProvider
Recipient: https://<Account_URL>/saml?id=<Account_ID>
ACS (Consumer) URL: https://<Account_URL>/saml?id=<Account_ID>
Single Logout URL: https://<Account_URL>/saml?id=<Account_ID>
Note: Replace <Account_URL> with your SureMDM Server Path (e.g., suremdm.42gears.com) and <Account_ID> with your specific Account ID.
Click Save to apply the configuration.
Go to the SSO tab and locate the SAML Signature Algorithm.
Select SHA-256 from the dropdown menu and click Save.
Click on the More Actions button at the top right and select SAML Metadata.
Once the XML file is downloaded, open the SAML Metadata file using a text editor to retrieve the required integration details.
Configure SureAccess Authentication Type in SureMDM
Log in to the SureMDM Console.
Go to Settings > Account Settings > Enterprise Integrations > SureAccess > SureAccess Configuration > SureAccess Authentication.
Set SureAccess Authentication Type to SAML Authentication.
Select OneLogin.
Enter the respective values (Service Identifier, Sign On Service Url, Logout Service Url) copied from point 10 of Step 1.
Click Apply to save.