> For the complete documentation index, see [llms.txt](https://docs.devarmor.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devarmor.com/getting-started/single-sign-on-sso-authentication/onelogin-sso-catalog.md).

# OneLogin SSO (App Catalog)

How to add DevArmor from the OneLogin App Catalog

DevArmor has a dedicated connector in OneLogin's App Catalog, so adding it doesn't require building a custom OIDC app by hand — OneLogin pre-configures the redirect URI and token settings for you. If your OneLogin admin would rather use the generic OIDC connector instead (for example, if the catalog listing isn't visible in your org yet), see [OneLogin SSO (Manual)](/getting-started/single-sign-on-sso-authentication/onelogin-sso-manual.md).

### Prerequisites

* A **DevArmor organization account**. If your company doesn't have one, sign up at [https://devarmor.com](https://devarmor.com/) or contact your DevArmor representative.
* **Administrator** access to your OneLogin org.
* DevArmor enables OneLogin SSO **per organization**. You'll share your integration details with DevArmor in the steps below; DevArmor activates SSO for your organization, typically within **one business day**.

### Supported features

* **SP-initiated SSO**: users start sign-in from the DevArmor application.

Not supported:

* IdP-initiated SSO (launching DevArmor from the OneLogin portal) — sign-in always starts at `app.devarmor.com`
* Just-in-Time (JIT) provisioning — DevArmor provisions users on its side; authenticating via OneLogin doesn't create a DevArmor account by itself. See [Adding new users after setup](/getting-started/single-sign-on-sso-authentication/onelogin-sso-manual.md#adding-new-users-after-setup).
* SCIM provisioning
* Single Logout (SLO)

There's currently no public API for account management. New users are added within the DevArmor application by your organization's DevArmor admin, or by contacting `support@devarmor.com`.

### Configuration steps (OneLogin administrator)

For general background on adding apps in OneLogin, see OneLogin's own [Introduction to App Management](https://docs.oneidentity.com/bundle/onelogin_administration-portal/page/guides/administrationportal/introduction-to-app-management.htm#adding_apps_d71e238) guide.

1. In the OneLogin admin portal, go to **Applications → Applications → Add App**.
2. Search for **"DevArmor OIDC"** and select it, then click **Save**.
3. Open the **SSO** tab and copy the **Client ID** and **Client Secret**. The redirect URI and Token Endpoint Authentication Method are pre-configured by the connector — unlike the generic OIDC setup, there's nothing to set manually here.
4. On the **Users** tab, assign the users who should have DevArmor access.
5. Send DevArmor the following (see [our guide for a secure transfer](/getting-started/single-sign-on-sso-authentication/encrypting-credentials-for-devarmor.md) for the client secret):
   * Your **OneLogin domain** (for example, `yourcompany.onelogin.com`, or your custom domain if you use one)
   * The **Client ID** and **Client Secret** from step 3
   * The **email domain(s)** your users sign in with (for example, `yourcompany.com`)
6. DevArmor enables SSO routing for your organization and confirms by email.

### SP-initiated SSO (end users)

1. From your browser, navigate to the DevArmor sign-in page at [**https://app.devarmor.com/sign-in**](https://app.devarmor.com/sign-in).
2. Click **Sign in with OneLogin** and enter your work email address.
3. You're redirected to your OneLogin organization to authenticate with your OneLogin credentials.
4. After successful authentication, you're redirected to the DevArmor dashboard.

### Adding new users after setup

The same two-step process applies whether DevArmor was added via the catalog or the generic OIDC connector — see [Adding new users after setup](/getting-started/single-sign-on-sso-authentication/onelogin-sso-manual.md#adding-new-users-after-setup) on the manual setup page (just substitute **DevArmor OIDC** for the app name in that guide's OneLogin-side step, matching whatever you named it in step 2 above).

### Support

* **Support email:** <support@devarmor.com>
* **Documentation:** [https://docs.devarmor.com](https://docs.devarmor.com/)

<br>