Setup OneLogin Single Sign-on with Drupal OAuth Client

Configuration Steps

Create Application in OneLogin

• Sign in to your OneLogin Admin console.
• Navigate to Applications and select Applications on hover.

• Click on the Add App button.

• In the search box, enter OpenId Connect and click on the OpenId Connect ( OIDC) link.

• By default, the Display Name is pre-filled with OpenId Connect (OIDC). Please Enter an appropriate display name, scroll to the bottom, provide a Description, and click on the Save button.

• From the left navigation panel, click on the Configuration.

• Paste the copied Callback/Redirect URL into the Redirect URI's text field and click on the Save button.

• From the left navigation panel, click on the SSO tab.

• From the Enable OpenID Connect section copy the Client ID and Client Secret. Keep it handy. It will be required later.

How to Assign Users in the OneLogin Application:

• Go to the Onelogin Dashboard.
• Navigate to the Users tab in the top menu and select Users on hover.

• Search for users in the search box, and then select the user to whom you want to grant access.

• From the left navigation menu, click on the Applications.

• Under Applications, click the Plus (+) sign button.

• On the popup, select the application from the dropdown list for which you want to enable SSO for that assigned user, and then click the Continue button.

• On the next screen, check the box to Allow the user to sign in and then click on the Save button.

• The user has been assigned to your application.

Integrating Drupal with OneLogin

• Go to Drupal's Configure OAuth and paste the copied Application ID and Client secrets into the Client ID and Client Secret text fields.

• In the Endpoint URLs replace ‘’ with the OneLogin subdomain.

• You can refer to the OneLogin Endpoints and Scope from the table given below:

Scope	openid
Authorize EndPoint	https://{site-url}.onelogin.com/oidc/2/auth
Access Token Endpoint	https://{site-url}.onelogin.com/oidc/2/token
UserInfo Endpoint	https://{site-url}.onelogin.com/oidc/2/me

• The 'Send Client ID and Secret in Header or Body' checkbox allows you to specify whether the Client ID and Secret should be included in the header or the body of the Token Endpoint Request. If you're unsure which option to select, you can stick with the default settings.
• Click on the checkbox to Enable Login with OAuth, scroll down, and click the Save Configuration button.

Integrating Drupal with OneLogin:

• Go to miniOrange OAuth Client module.
• In Add tab, paste the copied Client ID and Client Secret from OneLogin in the Client ID and Client Secret text-field.

• In the Endpoint URLs replace ‘’ with the OneLogin subdomain.

• You can refer to the OneLogin Endpoints and Scope from the table given below:

Scope	openid
Authorize EndPoint	https://{site-url}.onelogin.com/oidc/2/auth
Access Token Endpoint	https://{site-url}.onelogin.com/oidc/2/token
UserInfo Endpoint	https://{site-url}.onelogin.com/oidc/2/me

• The Send Client-ID and Secret in checkbox allows you to specify whether the Client ID and Secret should be included in the header or the body of the Token Endpoint Request. If you're unsure which option to select, you can stick with the default settings.
• Click on the checkbox to Enable Login with OAuth, scroll down, and click the Save Configuration button.