This guide walks your OneLogin Administrator through creating a custom SAML 2.0 application connector, configuring parameters, and assigning users or roles. Once complete, send the Identity Provider details to Human Focus and our team will activate SSO for your account. For assistance contact support@humanfocus.co.uk.
Single Sign ON (SSO) Set-up for OneLogin
Please follow the below steps to configure SAML 2.0-based Single Sign-On (SSO) between OneLogin and the Human Focus e-Learning system.
1. Sign in to OneLogin Administration and go to Applications
Sign in to your OneLogin Administration portal at your-subdomain.onelogin.com using your Administrator account. In the top navigation bar, click Applications, then select Applications from the dropdown menu.
2. Search for “SAML Custom Connector” and select it
In the Find Applications search box, type SAML Custom Connector. From the results, click SAML Custom Connector (Advanced). This gives you full control over all SAML parameters required for Human Focus.
3. Name your application and click Save
You will be taken to the application’s Info tab. In the Display Name field, enter a recognisable name — for example “Human Focus e-Learning”. Optionally add a description and upload a logo. Click Save to create the application before configuring SAML settings.
4. Go to the Configuration tab and enter the SAML SP details
Click the Configuration tab. Enter the following Human Focus Service Provider values in the fields shown. Leave the RelayState field completely empty — do not enter any value here.
Audience (EntityID)
https://www.humanfocus.org.uk/
ACS (Consumer) URL Validator
https:\/\/www\.humanfocus\.org\.uk\/CBTbyB\/SAML\/AssertionConsumerService\.aspx
ACS (Consumer) URL
https://www.humanfocus.org.uk/CBTbyB/SAML/AssertionConsumerService.aspx
RelayState
(leave blank — do not enter any value)
Important — RelayState must be empty: Leave the RelayState field blank. Entering a value here will cause login redirects to fail. Do not populate this field.
5. Set SAML Signature and Name ID format on the Configuration tab
Click the Parameters tab. Click the + button to add each of the following parameters. These allow Human Focus to receive the correct user identity details upon sign-in. For each parameter, set the flag “Include in SAML assertion” to on.
6. Go to the Parameters tab and add user attribute mappings
On the Attribute mapping screen, click Add mapping and configure the attributes below. These allow Human Focus to receive the correct user identity and assign the appropriate role upon sign-in.
Role Mapping: If you want to enable Role Mapping within Human Focus to automatically assign learner or manager permissions, ensure the roles attribute is populated consistently across your OneLogin user profiles. Please contact Human Focus to confirm the expected role values.
7. Go to the Access tab and assign users or roles
Click the SSO tab. This page displays the Identity Provider details you need to send to Human Focus. You will find the SAML 2.0 Endpoint (HTTP), SLO Endpoint (HTTP), and X.509 Certificate. You can also click View Details to see the full certificate, or click Download to save it.
8. Go to the SSO tab and collect the Identity Provider details
Under the Google Identity Provider details section (accessible from the left-hand settings panel of your new SAML app), you will find the Login URL, Entity ID, and Certificate. This data needs to be sent to Human Focus.
SAML 2.0 Endpoint (HTTP) — IdP SSO URL
https://your-subdomain.onelogin.com/trust/saml2/http-post/sso/{app-id}
Issuer URL — IdP Entity ID
https://app.onelogin.com/saml/metadata/{app-id}
Also download and attach the X.509 Certificate file. Our team will typically activate SSO within 1–2 business days of receiving your details.
Note:
Note: The endpoint URLs and Issuer URL are unique to your OneLogin subdomain and application. Copy them directly from the SSO tab — do not use the example values shown here.
