How to configure SSO with One Login

AlphaLearn supports SAML-based SSO, acting as a Service Provider (SP) that delegates authentication to OneLogin as the Identity Provider (IdP). Once configured, users can log in to AlphaLearn using their existing OneLogin credentials.

Step 1: Add AlphaLearn as an Application in OneLogin

1. Log in to OneLogin and go to Administration → Applications → Applications.
2. Click Add App, search for SAML Custom Connector (Advanced), and select it.
3. Set the Display Name to AlphaLearn LMS and click Save.

Step 2: Configure the X.509 Certificate

1. In the AlphaLearn LMS application in OneLogin, click SSO in the left menu.
2. Under X.509 Certificate, click Change, select Low Strength Certificate, and click Continue.

Step 3: Add SAML Parameters

1. Click Parameters in the left menu and click the + icon to add each of the following. For each: enter the field name, check Include in SAML assertion, click Save, select the value, and click Save again.
   • email → Value: Email
   • fname → Value: First Name
   • lname → Value: Last Name

Step 4: Enable OneLogin SSO in AlphaLearn

1. In AlphaLearn, go to Customize → SSO.
2. Select OneLogin as the Identity Provider and click Submit.
3. Click on OneLogin to edit it and enter the following values (found in OneLogin → Application → AlphaLearn LMS → SSO):
   • Entity ID → Issuer URL
   • Single Sign-On Service → SAML 2.0 Endpoint (HTTP)
   • Single Logout Service → SLO Endpoint (HTTP)
   • Signing Cert → click View Details under X.509 Certificate and copy the full certificate text
4. Click Update. Note the Config Details values – you will need them in the next step.

Step 5: Enter AlphaLearn Config Details in OneLogin

1. In OneLogin, go to Administration → Applications → AlphaLearn LMS → Configuration and enter the following values from AlphaLearn’s Config Details:
   • Audience (Entity ID) → Audience
   • Recipient → Recipient
   • ACS (Consumer) URL Validator → ACS (Consumer) URL
   • ACS (Consumer) URL → ACS (Consumer) URL
   • Single Logout URL → Single Logout URL
   • Login URL → Login URL
   • SAML signature element → select Both
2. Leave all other fields blank and click Save.