Skip to content
English
Go to Toggl 2.0
  • There are no suggestions because the search field is empty.

Setting up SSO for OneLogin

Follow these steps if OneLogin is your identity provider.

Here's how to setup SSO if OneLogin is your iDP. 

  1. In the OneLogin admin panel, go to Applications and click Add App.
  2. Search for SAML and select SAML Custom Connector (Advanced).
  3. Name the app, add a logo, and click Save
  4. Open the Configuration section — you'll see fields to fill in, which come from Toggl.
  5. In a new tab, go to Toggl 2.0's Admin Console > Single Sign On and click Create SSO Profile.
  6. Set the profile name and company domain, and note the ACS URL and Entity ID shown.
  7. Back in OneLogin, enter the Entity ID into Audience (EntityID) and the ACS URL into ACS (Consumer) URL. For the ACS (Consumer) URL Validator, use:  
       ^https:\/\/accounts\.toggl\.com\/api\/sso\/acs\/\d+$

    Note: For Identity Provider–initiated login, append ?toggl_product=focus to the ACS (Consumer) URL field, and adjust the validator to ^https:\/\/accounts\.toggl\.com\/api\/sso\/acs\/\d+. 

  8. Also set SAML initiator to Service Provider, SAML nameID format to Email, and SAML signature element to Response (avoid Assertion here to prevent issues).
  9. Click Save.
  10. On the SSO tab, copy the Issuer URL.
  11. Back in the Toggl SSO profile, tick I have access to an IdP metadata URL and paste it in.
  12. Click Submit for review.
  13. Configuration's done — Toggl's team will verify the domain and notify you by email.