OneLogin gives users the ability to access the applications and other resources by logging in once to a single interface. Platforms like OneLogin are known as Identity and Access Management (IAM) solutions that are primarily used to provide their users with a Single Sign-on (SSO) experience.

OneLogin is a valuable source for discovery as it provides not only the ability to discover services and users but also can be leveraged to discover employee and department data.

Integration details


Integration Categories

  • Single Sign-on & CASB System


Authentication mechanism

  • API

Discovery Capabilities

Available entities

Entity description

Onelogin resource

New services

Service discovery is the process of automatically identifying services and applications. All discovered services are added to SMP automatically.



Users represent all discovered people who use a specific SaaS.




Employees are discovered to get a complete overview of all employees of an organization and enrich the data for each discovered user.



Departments represent the organisational structure of an organization relate to employees. This data is used to identify where in the organization which SaaS is used.


Set up Onelogin

Generate an API credential pair

  1. Access OneLogin as an account owner or administrator.
  2. Go to Developers > API credentials.
  3. On the API Access page, click New Credential. You should see the following:

  1. Enter a meaningful credential name, e.g. β€˜Leanix SMP’.
  2. Set scope to β€˜Read All’.
  3. Click Save.
  4. Click Done. Credentials should be visible on the API Access page.

For more details, you can refer to the official documentation

Integrate Onelogin in LeanIX SMP

  1. Login to Leanix SMP.

  2. Navigate to Settings > Discover Integrations, find OneLogin and click Add ( or

  3. Enter integration name and the credentials:

  • Subdomain: Use the domain for the region that your OneLogin account resides in
    • US:
    • EU:
  • Client ID, Client Secret: use credentials generated in β€˜Generate an API credential pair’.

  1. Click Connect