Provision Users with OneLogin

Prev Next

Identity management (IdM) integration capabilities in Quickbase, using the standard System for Cross-domain Identity Management (SCIM) specification, allow you to sync Quickbase with OneLogin.

Features supported

The following provisioning features are supported:

  • Create new users. New users created through OneLogin will also be created in your Quickbase account/realm.

  • Update user attributes. Updates made to the user's attributes through OneLogin will be pushed to your Quickbase account/realm.

  • Deactivate users. Deactivating the user or disabling the user's access to the application through OneLogin will deny access for the user in your Quickbase account/realm.

  • Reactivate users. Reactivating the user through OneLogin will restore access for the user in your Quickbase account/realm.

Prerequisites

Before you configure provisioning for Quickbase, make sure you have:

Sign in to OneLogin

  1. Sign in to OneLogin with an account that has admin privileges.

    OneLogin sign-in screen

  2. Select Administration on the right in the top menu bar.

    OneLogin top menu bar with Administration button highlighted

Configure Quickbase integration

  1. Select APPS from the top navigation bar in OneLogin, then select Add Apps.

    OneLogin APPS menu with Add Apps option

  2. Search for "Quickbase" and choose the entry with "Form-based auth, SAML2.0, browser extension, provisioning."

    OneLogin app catalog search results showing Quickbase with SAML2.0 provisioning entry

  3. On the Configuration screen, enter a Display Name. For Connector Version, make sure SAML 2.0 is selected, then select SAVE.

    OneLogin Configuration screen showing Display Name field and Connector Version set to SAML 2.0 with SAVE button

  4. Select Configuration. Enter your Quickbase realm name, SCIM Base URL, and SCIM Bearer Token. In API Status, select the ENABLE button.

    Note

    Your SCIM Base URL is: https://{yourRealmName}.quickbase.com/governance/scim/v2

    OneLogin Configuration tab showing Quickbase realm name, SCIM Base URL, SCIM Bearer Token, and API Status fields

  5. Select Parameters:

    OneLogin Parameters tab showing SCIM field mapping configuration

    Add the following values:

    Quickbase Field

    Value

    Email Address

    Email

    First Name

    First Name

    Last Name

    Last Name

    NameID

    Email

    SCIM Username

    Username

  6. Select SSO. In the Enable SAML 2.0 section, copy and save all the SAML 2.0 information to another file. You will need to provide this information to Quickbase for your realm SAML configuration.

    • To save the certificate, select View Details and then select Download.

    • To save the Issuer URL and the SAML and SLO endpoint URLs, select the copy to clipboard icon, then paste the URLs into a text file of your SAML configuration information.

    OneLogin SSO tab showing Enable SAML 2.0 section with certificate and endpoint URL fields

  7. Select Provisioning:

    OneLogin Provisioning tab showing Workflow section with Enable provisioning checkbox

    In the Workflow section:

    • Check Enable provisioning.

    • Uncheck Create user, Delete user, and Update user.

    • For When users are deleted in OneLogin, select Suspend.

  8. Select SAVE to save the settings in the Configuration, Parameters, SSO, and Provisioning sections.

Provision users

To create a new user in your OneLogin account, follow these steps:

  1. Select USERS, then select NEW USER.

    OneLogin USERS page with NEW USER button

  2. Enter the user's First name, Last name, Email, and Username, then select SAVE USER.

    OneLogin new user form with First name, Last name, Email, and Username fields

  3. Select MORE ACTIONS and select Change Password.

    OneLogin MORE ACTIONS menu with Change Password option

  4. Enter the password assigned for this user, which needs to be supplied to the user separately for their initial sign in, check Force user to update, then select UPDATE.

    OneLogin Change Password dialog with Force user to update checkbox and UPDATE button

Add users

  1. Select Applications and select the plus sign (+).

    OneLogin Applications tab with plus sign button to add an application

  2. Select your application and select CONTINUE.

    OneLogin application selection dialog with CONTINUE button

  3. Update any information for the user, then select SAVE.

    OneLogin user application settings with SAVE button

Restrictions

The maximum length for user first name, last name, email, and username is 255 characters.

Spaces are not allowed in username and email values.

Troubleshooting

To troubleshoot errors with provisioning, read Troubleshooting IdM provisioning in the Quickbase API Guide.