Help Center
Open app
Help CenterIntegrationsConnect OneLogin

Integrations

Connect OneLogin

How to connect OneLogin as your identity provider so Doow can map your users, groups, and app access.

Connecting OneLogin lets Doow discover which SaaS applications your team uses, who is using them, and how often. Doow requests read-only access and never modifies your OneLogin configuration.

What Doow reads from OneLogin

When you connect OneLogin, Doow pulls:

  • Users — names, email addresses, and status (active, suspended, locked)
  • Roles — role names and memberships, used to map departments and teams
  • Application assignments — which users are assigned to which SaaS apps via OneLogin
  • Access logs — last-login timestamps per user per app (used for utilisation calculations)

Doow does not read: passwords, MFA configurations, user attributes beyond name and email, or role rules.

Before you start

You need:

  • A OneLogin Super User or Administrator account
  • Permission to create an API credential set in OneLogin
  • SSO already configured in OneLogin if you plan to use it as your Doow SSO provider as well (optional)

Step 1 — Create API credentials in OneLogin

  1. Sign in to your OneLogin admin console.
  2. Go to Developers → API Credentials.
  3. Click New Credential.
  4. Give it a name (e.g. "Doow read-only integration") and set the role to Read users.
  5. Click Save.
  6. Copy the Client ID and Client Secret — you will need both in the next step.

Step 2 — Enter the credentials in Doow

  1. In Doow, go to Settings → Integrations.
  2. Click Connect integration and select OneLogin.
  3. Enter your OneLogin subdomain (e.g. acmecorp from acmecorp.onelogin.com).
  4. Paste the Client ID and Client Secret.
  5. Click Connect.

Doow validates the credentials and begins an initial sync. This typically takes 2–10 minutes depending on the number of users and apps in your OneLogin directory.

Step 3 — Verify the sync

Once the sync completes, your OneLogin-discovered applications appear on the Applications page (marked with an SSO badge). The number of users and roles imported is shown on the integration card in Settings → Integrations.

If some applications are missing, see Integration not syncing.

Renewing or revoking access

You can revoke Doow's access at any time:

  1. Go to Developers → API Credentials in OneLogin.
  2. Find the Doow credential and click Delete or cycle the secret.

If you revoke the credentials, Doow's sync stops and your OneLogin data is no longer updated. Historical data is preserved. To reconnect, create a new credential set and enter it in Doow.