Documentation
Open Cloudsmith

SAML

Single Sign-On with OneLogin

This guide provides step-by-step instructions on setting up OneLogin as a SAML IdP for your Cloudsmith Organization.

Adding Cloudsmith to OneLogin

Follow the steps to add Cloudsmith and configure SSO with OneLogin.

Step 1: Login and add a new app

Log into OneLogin and click Administration in the top right:

Once there, choose Applications from the top menu and there, click the blue Add App button in the top right:

Step 2: Select and configure the SAML Test Connector (Advanced) app

Search for "SAML Test Connector" and choose "SAML Test Connector (Advanced)":

On the next screen - Add SAML Test Connector (Advanced) - enter the Display Name as "Cloudsmith". You can optionally add the Cloudsmith logo too for easier visibility, you can find hi-res versions of the logo here. Then, click the blue Save button in the top right.

Once saved, a number of additional options will appear in the sidebar. Click "Configuration" to configure SAML settings.

  1. Set Single sign on URL to https://cloudsmith.io/orgs/WORKSPACE/saml/acs/, where "WORKSPACE" is replaced with your organization's slug.
    We use this URL for the Audience, Recipient, and ACS (Consumer) URL values in the form below.

  2. For ACS (Consumer) URL Validator use .*.

  3. Further down the page, for SAML signature element choose Assertion.

  4. Hit the blue Save button at the top of the page.

Step 3: Configure parameters: FirstName and LastName

Next, we'll configure OneLogin to also send the user's first and last names during sign-in.

  1. Click on Parameters in the sidebar, and then the small blue "+" symbol on the right:

  2. Add a new parameter named FirstName and ensure the box labelled "Include in SAML assertion" is checked:

  3. Hit the blue Save button. Then choose First Name from the drop-down presented and click Save.

  4. Repeat the above process for the LastName attribute.

  5. Once completed for LastName, click the Save button in the top-right to save all changes. Once configured, the parameters should appear as below:

Step 4: Configure SAML Signature Algorithm

Choose the SSO tab in the sidebar and change the** SAML Signature Algorithm** to "SHA-256" and click Save.

Your application is now configured on OneLogin and you can add users groups as required using the Users tab in the sidebar:

Providing configuration to Cloudsmith

Once configured as above, you'll need to provide metadata to Cloudsmith to connect to your newly configured IdP.

In the SSO tab of your configuration screen you should see a link that provides metadata for dynamic configuration. This is named Issuer URL:

To enable it, copy this link and add it to your Cloudsmith organization SAML settings. Your application should now appear on the OneLogin portal and you can use OneLogin to begin logging in straight away.

You'll be able to access the landing page of your organization at the following URL: https://app.cloudsmith.com/WORKSPACE/saml/login/, where WORKSPACE is your organization's slug/identifier.