How to Set Up SSO with OneLogin in AIScreen Manager

Single Sign-On (SSO) enables users to log into AIScreen Manager using their OneLogin credentials, simplifying access and enhancing security. This guide provides a step-by-step process in English to configure SSO with OneLogin in AIScreen Manager, ensuring clarity for easy implementation.

Step 1: Log into AIScreen Manager

• Open your AIScreen manager account.
  
• Go to the Settings panel.
  
• Navigate to Single Sign-On.

Step 2: Add a New Provider

• Click Add provider.
  
• In the popup, fill in the following fields:
  
  • Displayed name — the name your SSO will have in AIScreen.
    
  • Domain — enter your company domain.
    
  • Provider type — select OneLogin (or similar if OneLogin is not listed).
    
  • Metadata URL — leave this blank for now (you will add it later).

• After entering the name and domain and selecting the provider, the system will generate:
  
  • Entity ID
    
  • ACS URL

Save these values — you will need them for Okta configuration.

Step 3: Configure SSO in OneLogin

This step involves setting up a SAML application in OneLogin to integrate with AIScreen.

3.1 Log into or Create a OneLogin Account

• Access your OneLogin admin account.
  
• Click the Admin button in the upper right corner.

3.2. Create a New Application

• In the top menu, click on Applications.
  
• In the Applications section, locate the search bar.
  
• Type SAML Test Connector (IdP) into the search field.
  
• From the search results, select SAML Test Connector (IdP) by clicking on it.

3.3 Configure the New Application

• After selecting SAML Test Connector (IdP), you’ll be taken to the app configuration page.
  
• Display Name: Enter a name for the application, such as “AIScreen SSO”.
  
• Rectangular Icon (optional): Upload a rectangular logo if desired (e.g., your company or AIScreen logo) with an aspect ratio of 2.64:1.
  
• Square Icon (optional): Upload a square logo (at least 512x512px) if desired.
  
• Click Save to proceed.

3.4 Configure SAML Settings

• Navigate to the Configuration tab in the left sidebar.
  
• ACS (Consumer) URL: Paste the ACS URL you copied from AIScreen (from Step 2).
  
• ACS (Consumer) URL Validator: Enter * (a wildcard) to validate the ACS URL.
  
• RelayState: Leave this field blank. OneLogin will use the value sent by the service provider (AIScreen) by default.
  
• Save your changes by clicking Save.

Tip: For more details on each field, refer to OneLogin’s documentation under “How to Use the OneLogin SAML Test Connector.”

3.5 Adjust Parameters (Optional)

• Go to the Parameters tab in the left sidebar.
  
• Edit the Display Name if necessary. For AIScreen, ensure the value is set to aiscreen.
  
• Save the changes by clicking Save.

3.6 Obtain the Metadata URL

• Navigate to the SSO tab in the left sidebar.
  
• Locate the Issuer URL field (e.g., https://app.onelogin.com/saml/metadata/…).
  
• Copy this URL—it will be used in AIScreen to complete the setup.

Step 4: Complete the SSO Setup in AIScreen

• Return to AIScreen Manager.
  
• Enter the Metadata URL:
  
  • In the Single Sign-On settings, find the provider you started configuring in Step 2.
    
  • Paste the Issuer URL (Metadata URL) from OneLogin into the “Metadata URL” field.
    
• Click the Add provider button to save and activate the SSO setup.

Step 5: Conclusion and Testing

• Verify the Setup:
  
  • Log out of AIScreen Manager.
    
  • Go to the AIScreen login page and select the SSO option (e.g., “OneLogin SSO”).
    
  • Log in with your OneLogin credentials to confirm it works.

Troubleshooting Tips:

• Login fails: Double-check the Entity ID, ACS URL, and Metadata URL for typos or mismatches.

• App not visible: Ensure the app is set to “Visible in Portal” in OneLogin.

• Still stuck? Contact AIScreen support (hello@aiscreen.io) or OneLogin support with your configuration details.