OneLogin setup

Control access to BugSnag using OneLogin.

BugSnag’s integration with OneLogin provides:

• Authentication and authorization (SAML)
• User provisioning and deprovisioning (SCIM)

Setup SAML

To configure SAML (Organization admin access required):

1. In your Insight Hub dashboard, select Single sign-on from your organization settings (shortcut: go):

   • Copy the SAML endpoint URL to your clipboard.

2. In OneLogin, from the Administration dashboard select Applications from the Applications drop down menu. Then, Add App and search for “Bugsnag”. Select the SAML2.0 version and then Save.

3. On the Configuration tab:

   • Bugsnag Consumer URL - Paste the URL copied from BugSnag.
   • Select Save.

4. On the SSO tab:

   • Copy the Issuer URL to your clipboard.

5. In your Insight Hub dashboard:

   • Paste the Issuer URL in the SAML/IdP Metadata field.
   • Select Auto-provision collaborators if you would like accounts to be automatically created for new users when they first log in (see SCIM for full provisioning and deprovisioning support).
   • Select whether users will be granted access to all current projects or no projects by default. Users will only be added up to your plan’s collaborator limit. After provisioning, access to projects can be managed by any Admin.
   • Select Enable SSO.

6. You can now log in to your Insight Hub dashboard from your OneLogin App Home.

Setup provisioning and deprovisioning (SCIM)

The following provisioning and deprovisioning features are supported:

• Create users
• Update user names and email addresses
• Deactivate users

To configure access (Organization admin access required):

1. In your Insight Hub dashboard, select Personal auth tokens from the user settings (shortcut: gu) of an organization administrator:

   • Generate a new auth token which will be used for SCIM.

2. Select Single sign-on from your organization settings (shortcut: go):

   • Copy the SCIM Base URL.

3. In OneLogin admin, open the configuration for the BugSnag application and in the Configuration tab.

   • Enter the Auth token.
   • Enter the organization name only. The organization name is found in the SCIM Base URL: https://api.bugsnag.com/organizations/org-name/scim/v2

4. Then on the Provisioning tab:

   • Check Enable provisioning.
   • To deprovision users when their access is removed in OneLogin, select Delete in the dropdown.
   • Select Save.

5. Now when users are assigned and unassigned access to their account will be automatically provisioned and deprovisioned.

Session Timeout

If a SessionNotOnOrAfter value is present in the SAML authentication response, it will be used to set the timeout of the BugSnag session.

Please refer to your SSO provider’s documentation for more information on how to configure SessionNotOnOrAfter.