Before starting, complete the generic SSO setup prerequisites and have the SAML configuration values from Yasu’s SSO page ready.
Create a SAML application
- Sign in to the OneLogin Admin Portal
- Go to Applications → Applications → Add App
- Search for SAML Custom Connector (Advanced) and select it
- Name the application (e.g., “Yasu”) and click Save
Configure SAML connection settings
- Go to the Configuration tab
- Set the following fields:
- Audience (EntityID) → paste the Entity ID from Yasu’s SSO page
- ACS (Consumer) URL Validator → paste the ACS URL from Yasu’s SSO page (escape dots with
\.) - ACS (Consumer) URL → paste the ACS URL from Yasu’s SSO page
- SAML nameID format → select Email
- Click Save
Configure attribute mappings (parameters)
Go to the Parameters tab and add the following fields (click the + to add each):
Click Save after adding all parameters.
| Field name | Value | Include in SAML assertion |
|---|---|---|
email | ✅ | |
name | First Name + Last Name | ✅ |
displayName | User.DisplayName | ✅ |
memberOf | MemberOf | ✅ |
The
memberOf parameter sends group memberships in the SAML assertion. This is required if you want to use role mapping. Ensure that the users are assigned to the relevant groups in OneLogin under Users → Groups.Download metadata and configure Yasu
- Go to the More Actions dropdown (top-right) → SAML Metadata
- This downloads the metadata XML file
- In Yasu, go to Integrations → SSO Configuration and click Configure SSO
- Select OneLogin as the identity provider
- Enter your company domain
- Paste or upload the metadata XML
- Click Add Domain
Assign users to the application
- Go to the Users tab of the OneLogin application
- Use Roles or individual assignment to grant access:
- Via Roles: Go to Users → Roles, create or edit a role, and add the Yasu app to it
- Via Users: Go to Users → Users, select a user, go to Applications, and click + to assign the Yasu app
- Click Save
Assigned users can now sign in to Yasu via SSO. New users will be automatically provisioned via JIT provisioning.
Attribute Mapping Reference
When configuring attribute mapping in Yasu for OneLogin, use these values:| Yasu field | OneLogin attribute |
|---|---|
| Name attribute | User.DisplayName |
| Picture attribute | User.PhotoURL |
| Groups/role attribute | memberOf |
These are auto-configured when you select OneLogin as the identity provider during setup.