Skip to content
  • There are no suggestions because the search field is empty.

OneLogin SSO/SAML and Manual User Sync

Explains how to configure OneLogin SAML SSO 2.0 user sync for Foxit Admin Console.

Answer

OneLogin SSO/SAML and Manual User Sync

Prerequisite: Verify Domain in the Foxit Admin Console

  1. Open Foxit Admin Console
  2. Navigate to Settings > Directory Setting > Verify Domain / Domain Settings
  3. You can verify domains in the following two methods:
    • DNS Method – Copy a TXT record to your domain name system. (Recommended)
      • Type -> TXT
      • Host/Name -> @ or leave blank
      • TXT Value -> (Copy>Paste from Foxit Admin Console under
      • TTL -> 1 Hour
    • HTTPS Method – Upload an HTML file to the root folder of your domain’s website.
      • After uploading the HTML file or adding the TXT record, click Verify Domain.
      • In the pop-up dialog box, select TXT Record or HTTPS correspondingly, enter the domain you want to verify in the Domain field, and click Verify domain.
      • Then the domain will be added to the Verified Domains List, and you can view the verification status. The status of a domain may show Unverified. Verifying domains using DNS may take up to 72 hours for your domain to verify and DNS changes to take effect. Then you can click Verify in the Actions column to verify again.

To remove a domain from the list, click Remove in the Actions column. When a verified domain is removed, the users with that domain are no longer managed and won't appear on your managed account page

OneLogin SSO/SAML Configuration

You can integrate Foxit Admin Console (Service provider) with OneLogin (Identity provider) by following these steps. This is the most default configuration for a clean integration.

Note: This article contains information and instructions related to a third-party application (OneLogin).

These instructions may vary in your environment and need to be confirmed with your OneLogin vendor, if necessary.

  1. Signup and login

Log in after registering on the website： https://www.onelogin.com/

  1. Add Application

Click Applications → Applications

 

Click Add App



Enter SAML in the search box and select SAML Custom Connector(Advanced) SAML2.0 in the results list.

 

Enter any desired information such as Display Name → click Save

  1. Configure app properties

Navigate to Setting in Admin Console, click Directory Setting → Add directory

 

Set any desired directory name such as OneLogin, click Create and Continue

 

Click Configuration in the left sidebar of OneLogin

Note the SP Entity ID and SP Assertion Consumer Service URL from the Foxit Admin Console (Settings > Directory Setting). Enter the SP Entity ID into the Audience (EntityID) field and the Assertion Consumer Service URL into both the ACS (Consumer) URL Validator and ACS (Consumer) URL fields in LoginOne.

 

Select Assertion from the SAML signature element drop-down list → Click Save

Click Parameters in the left sidebar → Click +

Enter ' email ' at Field name → Choose Include in SAML assertion → Click Save

select Email under Value → Click Save

  1. Add Users

(Note: If you have already added the users you want to sync, you can skip these steps.)

Click Users → Users

Follow the steps below for each user you'd like to add.

 

Click New User

Enter the user's information → Click Save User

  1. Assign new login to User

Click a user you'd like to sync

Click Applications → Click +

Select the Admin Console application → Click Continue

click Save

  1. SSO Configuration

Click Applications → Click the Admin Console application

Note the x.509 Certificate , Issuer URL and SAML 2.0 Endpoint(HTTP) fields

This data should be entered into the Settings >Directory Setting page in the Admin Console.

Enter the Issuer URL into the Identity provider Entity ID field, SAML 2.0 Endpoint(HTTP) into the Identity provider SSO URL field, and the entire x.509 Certificate into the Public x509 certificate field of the Foxit Admin Console. Please Note that Choose Connector " OneLogin " → Click Save

 

 

Then, a pop-up window will ask you to add domain. Please click "Add domain", then select the domain to add into this new directory.

 

Once all above is done, the new directory will be shown in "Directory list", for example:

 

In addition, please go back to OneLogin > Applications, select the SAML application you added for Foxit Admin Console, and navigate to "Configuration" for this application. Then set https://adminconsole.foxit.com/ in "RelayState" and click "Save", to ensure correct post-login redirection.

Without this setting, the SSO portion will continue to loop not knowing where the target destination is.

 

OneLogin (SAML SSO 2.0) User Sync Configuration

The below guide is for manually syncing your OneLogin user directory INTO the Foxit Admin Console so licensing can be manually licensed in the console.

API Credentials

Click Developers → API Credentials

 

Click New Credential

 

Enter Name of new API credential, choose Reader users → Click Save

 

You can get Client ID and Client Secret. Keep that pop-up window and open Foxit Admin Console in another window. In Foxit Admin Console, navigate to Settings > Directory Settings, find the directory and click "Add Sync".

Then, copy following information from OneLogin to Foxit Admin Console:

Client ID of OneLogin → Client ID in Admin Console

Client Secret of OneLogin → Client Secret in Admin Console

Then click Authorize in Admin Console.

 

 

 

Still in Foxit Admin Console > Settings > Directory Settings, click Synchronize for the directory that you just finish the configuration, to sync users or group.