Setup SSO for ImageKit on OneLogin
There are two main steps required to set up SSO using OneLogin on ImageKit:
First, you need to create an application on OneLogin and generate a SAML Metadata XML file.
- 2.Navigate to the "Applications" screen using the top navigation menu
- 3.Click the "Add App" button, then search for "SAML Custom Connector"
- 4.Choose the correct "Advanced" connector as shown below
- 5.Input a name for the application, we will use "ImageKit" for this guide
Click "Save" and wait until you are redirected to the application page.
Create a SAML application
Choose the SAML Custom Connector (Advanced)
On the application page, navigate to the 'Configuration' screen.
On this screen, we will configure various authentication parameters:
Leave the rest of the values as they are.
Note: Name ID is the unique email address of the user that will be used to identify them on ImageKit.
Basic SAML configuration
Navigate to the "SSO" tab and change the value of "SAML Signature Algorithm" to
You may also note an alternate link to obtain SAML Metadata XML below it.
SSO signature settings
Now you need to specify three custom keys that ImageKit uses to authorize and provision your users:
Navigate to "Users > Custom User Fields", and create user attributes that will be mapped and sent to ImageKit during authentication.
Custom User Fields
Back on the application page under the "Parameters" section, ensure that these fields are included correctly in your OneLogin user object.
SAML attribute statements
Assign users to the ImageKit application by going to the Users section, selecting a user, and navigating to the Applications tab on the user's details page.
Save your assignments before proceeding further.
Assign a user to the app
Navigate to the application setup screen and use the popover menu highlighted here to download the SAML Metadata XML file.
Save it in a safe location. You will need to upload this XML file to your ImageKit account in a later step.
Download and save the SAML Metadata XML
Enable SSO for all users
If you have administrator privileges on your ImageKit account, you can enable SSO for all the users in your account as follows:
- 3.Copy and paste the contents of the file into the Metadata XML input box.
- 4.Click on the 'Save' button.
Your users should now be able to use OneLogin SSO to log into ImageKit.
SSO users would need to initiate their very first login on ImageKit through the ImageKit app by navigating to their dashboard on OneLogin.
ImageKit SSO login screen
You can disable SSO login for the users on your ImageKit account by deleting the Metadata XML.