Enterprise Admin Tool

SSO Authentication Setup - OneLogin

Below you will find requirements and instructions for enabling OneLogin SSO for your organization using the Enterprise Management Interface.

Access Requirements

• Administrative rights to manage Beams for your organization.
• An active OneLogin subscription with superuser access.
        - For Active Directory setup, see: OneLogin's Active Directory Connector Installation Instructions

Note: Once Beam is connected to OneLogin, you can use any supported OneLogin authentication method. These include Active Directory, Google Apps, LDAP, and more.

Enabling SSO Authentication

Begin by adding the Beam app to your existing OneLogin account.

1. Navigate to OneLogin Home and sign in to your company's OneLogin Account.
2. Select the Apps icon from the main menu, then select Add Apps from the drop-down.
3. Search “Beam” in the Find Applications search box.
4. Select Beam by Suitable Technologies for SAML2.0 authentication.
5. Select Save to add the Beam App to your list of apps.
6. A green notification box will appear indicating the successful addition of the Beam App.
7. Select SSO from the Beam App main menu.

You are now ready to enter the Enable SAML2.0 configuration data to your organization settings. You must import users directly from Active Directory or manually add users to the Beam App. For more information on how to import users, visit the OneLogin Help Center.

1. In a separate browser tab, log in to Your Account.
2. You will be redirected to the Advanced Beam Management Dashboard.
3. Select Organization from the main menu.
4. Select Authentication from the section menu to view your Authentication Settings.
5. Under Authentication Method, click Change next to Beam and/or Google Accounts.
6. Select OneLogin, then Continue.

The following instructions will lead you to the necessary information to enter your OneLogin App ID:

1. Return to the Beam App SSO settings and locate the field for Issuer URL.
         1. Copy the numeric value at the end of the URL.
         - Note: This is your company's OneLogin App ID.
2. Tab back to the Configure OneLogin form and paste the OneLogin App ID. Hit Continue.
3. Next, you will be provided with the option to allow guests access. Allowing guest access will let users not managed by your identity provider be a part of your organization.
4. Finally, you will be provided with the option to edit the message sent to all users within the Beam organization informing them of this change.
5. Click Confirm and Send E-Mail when complete.

Domain Management

You must verify that your organization owns the domain associated with your user's email accounts. This can be done via DNS TXT or CNAME entry.

1. Begin by selecting Add Domain.
2. Enter the domain associated with your organization.
3. Click Save Domain.
4. A green notification box will appear indicating the domain has been successfully added.
5. All domains must be verified with a DNS TXT or DNS CNAME.
   - Note: Domain verification may take a few hours after saving.

Verify with DNS TXT

1. Select the Verify with DNS TXT box under the Domain Management to view instructions for adding a TXT record to your host's DNS settings.

Verify with DNS CNAME

1. Select the Verify with DNS CNAME box under the Domain Management to view instructions for adding a CNAME record to your host's DNS settings.

For additional information, email our Customer Success Department at This email address is being protected from spambots. You need JavaScript enabled to view it..