This article include the steps on setting up SalesHood Single sign on (SSO) using OneLogin identify provider service.

Step 1: Configuring OneLogin

• Go to the “Apps” and “Add Apps”

• Search for “SAML”
• Select “SAML Test Connector (Advanced)”

• Name the App
• (Optional) Upload the logo
• Click Save

Step 2: Configuration

Go to “Configuration” section in the left hand menu and fill out the below SAML settings and hit “Save”

SAML Settings

• RelayState: https://{clientdomain}.saleshood.com/
  • Example: https://ringcentral.saleshood.com/
• Audience (EntityID): https://{clientdomain}.saleshood.com/auth/saml/callback
  • Example:
    https://ringcentral.saleshood.com/auth/saml/callback
• ACS (Consumer) URL Validator / ACS (Consumer) URL: https://{clientdomain}.saleshood.com/auth/saml/callback
  • Example:
    https://ringcentral.saleshood.com/auth/saml/callback

Step 3: Parameters

• Click Parameters in the left navigation menu.
• Click the + button to add a new field.

• Type in email as the name in the popup and check mark the “Include in SAML assertion” box.

• Click on the value column on the next screen and select Email as the value from the dropdown.

Repeat this process for two more fields:

Create a field first_name with the value mapped to First Name, and last_name mapped to value Last Name.

You will have email, first_name, andlast_name when you’re back on the Parameters screen.

Step 4: Adding Users

You’ll need to grant your users permission to the application you just created, either by adding individual Users or by adding Roles/Groups within OneLogin according to how you prefer to manage your Users there.

Step 5: Download the X.509 Certificate and get the SAML 2.0 Endpoint URL

Navigate back to your company app you created and select SSO from the left side navigation.

• Copy the SAML 2.0 Endpoint (HTTP) in a notepad (you will need to send this to SalesHood team)
• Click View details for the X.509 Certificate. This opens a new page where you can click the Download button to download the onelogin.pem (X.509) file.

Send the SAML 2.0 Endpoint (HTTP) URL and the
onelogin.pem (X.509 Certificate) to support@saleshood.com

The SalesHood team will deploy the SSO after doing the internal configuration on SalesHood end.