Configure single sign-on with OneLogin as identity provider

Administrator role in OneLogin required. Promaster A Nintex Promapp system administrator who administers a Nintex Promapp site and has rights to view and edit all areas of a Nintex Promapp site. privilege in Nintex Process Manager required.

You can configure Single Sign-On (SSO) in your Nintex Process Manager site with OneLogin to enable users to securely and conveniently sign in to Nintex Process Manager using the same credentials.

Prerequisites

You must have the following prerequisites configured before you start:

  • Have a OneLogin account with administrator privileges. For more information, see the OneLogin Help.
  • Have a Nintex Process Manager site user with Promaster privileges. For more information, see Managing users in Nintex Process Manager.
  • Ensure that the Logon field for the User record in Nintex Process Manager is denoted as Name Identifier (Subject) in OneLogin and field must match the UserPrincipalName in OneLogin.

Once you have the prerequisites configured, follow the details in the sections below.

Configure SSO in OneLogin and Nintex Process Manager

Follow these steps to configure settings in OneLogin and Nintex Process Manager for enabling SSO.

  1. Log in to your OneLogin as an administrator.
  2. Click Applications > Add App.
  3. Search for Process Manager and click on the displayed application to add. The Configuration page is displayed.
  4. Enter a Display Name and click Save.

    5. The list of configuration options are displayed on the left.

  5. Click Configuration and complete the following fields:
  1. Click Parameters and configure the following fields:
    1. Select the Configured by admin option.
    2. Verify the mapping for the Promapp Field and Value is as follows:
  2. Click SSO and copy the following values to a text file.

    Important: These values are required to configure SSO settings in your Nintex Process Manager site.

  3. Configure the Access, Users, and Privileges on the respective pages.
  4. Click Save.

Promaster A Nintex Promapp system administrator who administers a Nintex Promapp site and has rights to view and edit all areas of a Nintex Promapp site. privilege is required.

Follow these steps to configure the SSO settings in your Nintex Process Manager site:

  1. Sign in to your Nintex Process Manager site.
  2. Go to Admin > Configure > Security.
  3. In the SSO - Single Sign-on Mode field, click edit and select Optional from the drop-down list. Setting it as Optional allows you to test both the Identity Provider login and Nintex Process Manager login independently to ensure both are working. Once set to Required it is much more difficult to troubleshoot problems if login does not work as expected.
  4. In the SSO - Login Url field, click edit. Paste the SAML 2.0 Endpoint (HTTP) URL you noted in Step 7a.
  1. In the SSO - x.509 Certificate field, click edit. Paste the X.509 Certificate details you copied in Step 7b.

  1. Enabling the Sync user details with SSO provider setting will allow users in your Entra ID to login to the configured Nintex Process Manager for the first time and a “User” will be automatically created in Nintex Process Manager if the record does not exist.

    • If Sync user details with SSO provider is disabled, the Promaster must create the user in Nintex Process Manager.

    • Ensure that the Logon field for the User record in Nintex Process Manager must match the User Principal Name in the Entra ID.

    • Update Nintex Process Manager user names in bulk (if required) by exporting the user details, changing them in the .csv file and importing again. For more information, see import users.

Once you have configured the SSO settings for your Nintex Process Manager site, ensure you test the connection.

Before you start Ensure you have logged out of your Nintex Process Manager site.

  1. Log in to your OneLogin site.
  2. Click the Nintex Process Manager app icon on your OneLogin app list.

You will be logged in to your Nintex Process Manager site.

Troubleshooting

For more information and troubleshooting, see: