[Components] onelogin

[pipedream-component-development]

onelogin

URLs

Polling Sources

new-user

Prompt

Emit new event when a user is created in OneLogin. Users can configure filters such as user role or group for more specific triggering.

URLs

• https://developers.onelogin.com/api-docs/1/events/get-events

new-login-attempt

Prompt

Emit new event when a login attempt occurs in OneLogin. Users can optionally filter by successful or failed attempts.

URLs

• https://developers.onelogin.com/api-docs/1/events/get-events

new-directory-sync-event

Prompt

Emit new event when a directory sync event is triggered in OneLogin. Users can configure optional filters, such as specific directory names or sync statuses.

URLs

• https://developers.onelogin.com/api-docs/1/events/get-events

Actions

create-user

Prompt

Create a new user in OneLogin with details. Required props: 'firstname', 'lastname' and 'email' or 'username'. Optional props: 'company', 'department', 'directoryId', 'distinguishedName', 'externalId', 'groupId', 'invalidLoginAttempts', 'localeCode', 'memberOf', 'openidName', 'phone', 'samaccountname', 'title' and 'customAttributes'. Prop 'groupId' has async options

URLs

• https://developers.onelogin.com/api-docs/1/groups/get-groups
• https://developers.onelogin.com/api-docs/1/users/user-resource
• https://developers.onelogin.com/api-docs/1/users/create-user

update-user

Prompt

Update an existing user's details in OneLogin. Required props include the user ID. Optional props are all props in create user action. Prop userId has async options.

URLs

• https://developers.onelogin.com/api-docs/1/users/get-users
• https://developers.onelogin.com/api-docs/1/users/update-user

revoke-user-sessions

Prompt

Revoke all active sessions for a specified user in OneLogin. Requires the user ID as input. Prop userId has async options.

URLs

• https://developers.onelogin.com/api-docs/1/users/get-users
• https://developers.onelogin.com/api-docs/1/users/log-user-out

[sergio-eliot-rodriguez]

Just to have a note of this, OneLogin was onboarded as a non official OAuth 2.0 application. This was discussed (via a Slack thread) with Michael Lim previous to onboarding to the app store:

ML: Hey Sergio, wondering if you can share a little bit more about how OneLogin works - I'm not sure I really get the auth flow off the bat..

SER: Where are you stucked?
Are you getting an error?

ML: I'm just trying to wrap my head around how this should work. I set up an official Pipedream client, and tried logging in using your sergio@ credentials but it's not working
I think the issue is that you have to be added as a user to the app (?) and it's not like a publicly-available app maybe?
as in, i can't log into the pipedreamdev app using oauth@pd, nor can i log into pipedream app using sergio@pd

SER: Correct. And the user that I added to the app was shared with its password in the "Pingone (test user for oauth app)" item in 1pw

ML: so i guess - this should definitely be the "no official pd client" setup then right?

SER: Right

[sergio-eliot-rodriguez]

@luancazarine

I was able to properly connect a OneLogin account into Pipedream to run workflows.

Here is an screenshot with the test request running

Because the Pipedream app for OneLogin was defined as an OAuth 2.0 app using the authorization code grant and an unofficial client (see previous comment), in OneLogin you have to create an OpenID connector (found under Applications menu > Custom connector menu option). Here you defined the Redirect URI, then once you have a OpenID connector being listed, hit "Add app to connector" to define an OAuth 2.0 where you'll get a client id/ client secret found under the SSO tab. Plus note that the Pipedream app for OneLogin sends client/secret via the request payload, thus inside the SSO tab, "Token Endpoint > Authentication method" section, select "POST" from the options.

I added client id/secret & redirect URI, but you may have to do this on your own, so use this guide as a reference: https://onelogin.service-now.com/support?id=kb_article&sys_id=2fd988e697b72150c90c3b0e6253af7f

Remember key steps are
"Applications" > "Custom connectors" > "Create new connector",
When entering details select "OpenID Connect" and just enter the Redirect URI given by Pipedream

Once you created your OpenID connector, go again to "Applications" > "Custom connectors"
You'll see your connector listed, click the "Add App to Connector" link on the right

Address mainly the SSO section, also get client id/secret from here, set Token endpoint to "POST".
Feel free to leave Login URL and others as empty, you just have to define Redirect URI

LMK if this works. Thanks.

[luancazarine]

@luancazarine

I was able to properly connect a OneLogin account into Pipedream to run workflows.

Here is an screenshot with the test request running

Because the Pipedream app for OneLogin was defined as an OAuth 2.0 app using the authorization code grant and an unofficial client (see previous comment), in OneLogin you have to create an OpenID connector (found under Applications menu > Custom connector menu option). Here you defined the Redirect URI, then once you have a OpenID connector being listed, hit "Add app to connector" to define an OAuth 2.0 where you'll get a client id/ client secret found under the SSO tab. Plus note that the Pipedream app for OneLogin sends client/secret via the request payload, thus inside the SSO tab, "Token Endpoint > Authentication method" section, select "POST" from the options.

I added client id/secret & redirect URI, but you may have to do this on your own, so use this guide as a reference: https://onelogin.service-now.com/support?id=kb_article&sys_id=2fd988e697b72150c90c3b0e6253af7f

Remember key steps are "Applications" > "Custom connectors" > "Create new connector", When entering details select "OpenID Connect" and just enter the Redirect URI given by Pipedream

Once you created your OpenID connector, go again to "Applications" > "Custom connectors" You'll see your connector listed, click the "Add App to Connector" link on the right

Address mainly the SSO section, also get client id/secret from here, set Token endpoint to "POST". Feel free to leave Login URL and others as empty, you just have to define Redirect URI

LMK if this works. Thanks.

Hi @sergio-eliot-rodriguez, Thanks for the explanation. It works fine now!

[sergio-eliot-rodriguez]

@luancazarine not sure if i updated you before, but we changed the authentication strategy for the OneLogin app, now using the client credentials flow; also there is new account in 1PW with Leo's email, if you'd like to try and resume development