One login for everyday access
Employees reach Empuls with the same OneLogin credentials they use for other work apps. Fewer passwords to remember and reset.
OneLoginSingle sign-on for Empuls with
Single sign-on for Empuls with
OneLogin
Let employees sign in to Empuls with their OneLogin credentials over SAML 2.0.
Book a demo
Get a personalised walkthrough. We respond within one business day.
What you can do
Four things you get once OneLogin is connected
OneLogin handles identity. Empuls accepts the sign-in, so access follows the rules your IT team already manages.
Sign in with the credentials people already have
- SAML 2.0 single sign-on
- Employees enter their email, get redirected to OneLogin, and authenticate with their organizational credentials. They return to Empuls signed in.
- Credentials stay in OneLogin
- Authentication happens in OneLogin. Empuls receives the SAML response and does not need a separate password for your employees.
Flexible identity matching
- Email as NameID
- Email is the recommended NameID format, so each OneLogin user maps to the matching Empuls profile.
- Employee ID as an alternative
- If your organization prefers it, use the Unspecified NameID format with Employee ID instead of email.
Rollout on your terms
- Optional or mandatory SSO
- Admins decide whether SSO is optional or mandatory for their organization, so you can phase in the change.
- Optional relay state
- Set a Default Relay State in the OneLogin app if you want to control where users land after sign-in.
Fits the way IT already works
- Metadata-based setup
- Download the OneLogin IdP metadata and upload it to Empuls. There is no custom code to write.
- SCIM configured separately
- Empuls supports SAML authentication. If you need SCIM provisioning, it can be configured separately.
Use cases
Who uses it, and what for
Three ways teams use OneLogin SSO with Empuls.
Enforce SSO across the organization
Make SSO mandatory once your rollout is complete, so every sign-in to Empuls goes through OneLogin.
Keep access control in OneLogin
Your identity team continues to manage authentication in OneLogin, with Empuls added as one more SAML 2.0 application.
How it works
From OneLogin app to signed-in employee
Step 1
Create a SAML 2.0 app in OneLogin
In the OneLogin Admin Portal, create a new SAML 2.0 application for Empuls.
Step 2
Add the Empuls service provider details
Enter the ACS URL and Entity ID (Audience URI) from Empuls, then set the NameID format and attribute mapping.
Step 3
Upload the IdP metadata to Empuls
Download the OneLogin IdP metadata and upload it in the Empuls admin settings.
Step 4
Test the connection
Run a test sign-in, then choose whether SSO is optional or mandatory for your organization.
Setup
SAML 2.0 setup in OneLogin and Empuls
Your admin configures a SAML app in OneLogin and uploads its metadata to Empuls.
Native SSO integration for Empuls using OneLogin.
SAML 2.0. Sign-in is initiated from the Empuls email prompt and redirected to OneLogin.
Email (recommended), or Unspecified using Employee ID.
ACS URL and Entity ID / Audience URI. Default Relay State is optional.
Common Questions
Frequently asked questions
Common questions from IT admins and security reviewers evaluating OneLogin SSO for Empuls.
Still have a question? Talk to usSAML 2.0. You create a SAML 2.0 app in OneLogin and exchange metadata with Empuls.
Email is recommended. You can also use the Unspecified format with Employee ID if that suits your organization better.
No. Admins can choose whether SSO is optional or mandatory for their organization.
The ACS (Assertion Consumer Service) URL and the Entity ID / Audience URI. You enter these in the OneLogin SAML app. A Default Relay State is optional.
The integration handles SAML authentication. SCIM can be configured separately if you need provisioning.
The Empuls help center has the full OneLogin SSO setup guide. A link is in the Setup section of this page.
See it in your own OneLogin setup
A 30-minute call. We'll walk through the SAML settings, NameID options, and how to roll out SSO to your organization.
Book a demo