***

title: OneLogin Setup (OIDC)
excerpt: ''
deprecated: false
hidden: false
metadata:
title: ''
description: ''
robots: index
next:
description: ''
---------------

# Prerequisites

<Warning title="Making edits?">
  Before you edit your SSO configuration, make sure you are logged into MyMoveworks. Otherwise, you will not be able to log in and update your SSO configuration details.
</Warning>

**OneLogin SSO Prerequisites**

* Have administrator access to OneLogin. You should be able to access your portal at `https://{{your_subdomain}}.onelogin.com/admin2`

**Moveworks SSO Prerequisites**

* Your Moveworks Environment should be initialized in order to continue. (Verify with your Account Team if this has been completed)
* Note the following values.

  * `data_center_domain` - the data center where your organization is hosted (see table below).

    | Data Center              | data\_center\_domain          |
    | :----------------------- | :---------------------------- |
    | United States (default)  | moveworks.com                 |
    | Canada                   | am-ca-central.moveworks.com   |
    | EU                       | am-eu-central.moveworks.com   |
    | Australia / Asia Pacific | am-ap-southeast.moveworks.com |
    | Government Secure Cloud  | moveworksgov.com              |
  * `subdomain` - your organization's login subdomain. This should match your `customer_id`, which can be[verified from the General Information Page](/service-management/administration/organization-information).

    <Callout intent="warning">
      Make sure to use the unique subdomain. For example, if you're organization's login subdomain is **acme.moveworks.com**, then your `subdomain` is **acme** and your `data_center_domain` is **moveworks.com** which is part of the US Data center.
    </Callout>
  * `customer_id` - The unique identifier for your organization . This is stored as **Org Name** under **Organization Details > General Information**

    ![](https://files.readme.io/ec5bf3b5e47317fcf8d2ba7f7d6b1348befd4c402553e53c4d966795d1715e13-CleanShot_2024-11-11_at_14.53.19.png)

    <Callout intent="error" title="The Org name cannot be changed. Once set, the same value should be used in all cases.">
      In exceptional cases where you would like Moveworks to support your organisation with a different subdomain value. Please reach out to Moveworks Support.
    </Callout>

# Configuration Steps

## Create OIDC Application

1. Go to **Applications > Custom Connectors**

   ![](https://files.readme.io/f2a2731-onelogin_1.png)
2. Click **New Connector** & fill out the details

   * **Name**: `Moveworks`
   * **Icon**:

     * **Rectangular**

       ![](https://files.readme.io/b661f3d312cbe249ac4eb3820adb3abc0ec2dae9a909445d348bb18fa00dcda0-image.png)

       <br />
     * **Square**

       ![](https://files.readme.io/6c112c644732faf438194995a6297590e7dc507597c237e05dfe1094a80324d8-image.png)

       <br />
   * **Sign on method**: `OpenID Connect`
   * **Redirect URI**: `https://{{subdomain}}.{{data_center_domain}}/login/sso/oidc`
   * **Post Logout Redirect URI**: `https://my.moveworks.com`
   * **Signing Algorithm**: `RS256`
   * **Login URL**: `https://{{subdomain}}.{{data_center_domain}}`
3. Go back to **Applications > Custom Connectors** and select **Add App to Connector** on your newly created Connector

   ![](https://files.readme.io/1d67946ff5bb6e4d2a4caeee25be55a572c52c97922429cfdce80404a4e90e96-CleanShot_2024-10-28_at_20.28.462x.png)
4. Keep the Default Settings and hit **Save**

   ![](https://files.readme.io/b0e0379b34e76df4683cd4e7088d455b4b7c3b21604158e6e45ba2cf3a7fe6c1-CleanShot_2024-10-28_at_20.29.222x.png)

## Add OIDC Configuration in MyMoveworks

1. Copy your OIDC Configuration Variables\
   ![](https://files.readme.io/5e079e7fc7f02881dff4e71da9d12654b81478cf5f3edee40486a301e27644f7-CleanShot_2024-10-28_at_20.31.252x.png)
   * **Client ID**: This is your `idp_client_id`
   * **Show client secret**: Click this to see your `idp_client_secret`
   * **Issuer URL**: This is your `idp_issuer`
2. Navigate to SSO Settings in MyMoveworks

   ![](https://files.readme.io/e25fedd98447cb1b70e1cf2268eac976421b1f2dbd5a43b0793af7915810d433-image.png)
3. If you already see a `studio` config, edit it. Otherwise, choose **Create**.
4. Add your configuration using the values you've noted above
   * **Moveworks Product**: `studio`
   * **Select Connector**: `onelogin`
   * **Authentication Protocol**: `OIDC`
   * **IDP Redirect URL**: `https://{{subdomain}}.{{data_center_domain}}/login/sso/oidc`
     * e.g. [https://acme.am-eu-central.moveworks.com/login/sso/oidc](https://acme.am-eu-central.moveworks.com/login/sso/oidc)
   * **IDP Issuer**: `idp_issuer`(from Step 1)
     * e.g. [https://acme.onelogin.com/oidc/2](https://acme.onelogin.com/oidc/2)
   * **IDP Client Id**: `idp_client_id` (from Step 1)
   * **IDP Client Secret**: `idp_client_secret` (from Step 1)
5. Click **Submit**.
6. Wait a few minutes, then attempt to log into your instance at `https://{{subdomain}}.{{data_center_domain}}`