Configure Single Sign-On in OneLogin for CloudCheckr CMx
In this topic, you will learn how to set up SSO with your OneLogin account by configuring:
- OneLogin (the Identity Provider or IdP)
- CloudCheckr CMx (the Service Provider or SP)
Workflow
- From your OneLogin landing page, select the New App button or from the App drop-down menu, select Add Apps.
- On the Search page, type CloudCheckr in the search text field.
- From the search results, click CloudCheckr Multi.
The portal page opens.
- Click Save from the top right of the page.
The configuration page opens.
- Select the Configuration tab.
- Choose the Consumer URL and Audience that match the AWS region you use to access CloudCheckr:
Region
Consumer URL
Audience
US
https://auth-us.cloudcheckr.com/auth/sso/saml2/Acs
https://auth-us.cloudcheckr.com/auth
EU
https://auth-eu.cloudcheckr.com/auth/sso/saml2/Acs
https://auth-eu.cloudcheckr.com/auth
AU
https://auth-au.cloudcheckr.com/auth/sso/saml2/Acs
https://auth-au.cloudcheckr.com/auth
GOV
https://auth-gov.cloudcheckr.com/auth/sso/saml2/Acs
https://auth-gov.cloudcheckr.com/auth
Federal
https://auth-fed.cloudcheckr.com/auth/sso/saml2/Acs
https://auth-fed.cloudcheckr.com/auth
- Provide a valid email address for each user that will be logging into CloudCheckr by selecting the user from the list, and entering the correct email for the CloudCheckr account you have configured.
- Click Save.
- On the SSO tab, select View Details below the x.509 certificate.
- Click Copy to Clipboard to copy the entire certificate and paste it into your reference document.
- Copy the issuer URL and the SAML endpoint, which will be used to configure your SSO in CloudCheckr.
- Click Save.
- Create a support ticket in the CloudCheckr Service Desk Portal that indicates you configured your SAML information.
- Attach the XML file that you downloaded in the previous procedure to your ticket.
Although CloudCheckr will provision your users for the first-time logon, your organization must enable specific permissions and account access for your CloudCheckr CMx users. For more information, see the Access Management and Roles topics.
