OneLogin gives users the ability to access the applications and other resources by logging in once to a single interface. Platforms like OneLogin are known as Identity and Access Management (IAM) solutions that are primarily used to provide their users with a Single Sign-on (SSO) experience.

OneLogin is a valuable source for discovery as it provides not only the ability to discover services and users but also can be leveraged to discover employee and department data.

Integration details


Integration Categories

  • Single Sign-on & CASB System


Authentication mechanism

  • API

Discovery Capabilities

Available entitiesProductEntity descriptionOnelogin resource
New services EAM, SMPService discovery is the process of automatically identifying services and applications. All discovered services are added to LeanIX automatically.Apps
Users SMPUsers represent all discovered people who use a specific SaaS.Users

Employees SMPEmployees are discovered to get a complete overview of all employees of an organization and enrich the data for each discovered user.Users
Department SMPDepartments represent the organisational structure of an organization relate to employees. This data is used to identify where in the organization which SaaS is used.Users

Set up Onelogin

Generate an API credential pair

  1. Access OneLogin as an account owner or administrator.
  2. Go to Developers > API credentials.
  3. On the API Access page, click New Credential. You should see the following:

  1. Enter a meaningful credential name, e.g. ‘Leanix’.
  2. Set scope to ‘Read All’.
  3. Click Save.
  4. Click Done. Credentials should be visible on the API Access page.

For more details, you can refer to the official documentation

Integrate Onelogin in LeanIX

  1. Login to Leanix.

  2. In LeanIX EAM:Navigate to Administration > SaaS Discovery > Integrationsfind OneLogin and click Add integration
    In LeanIX SMP navigate to Settings > Discover Integrations, find OneLogin and click Add

  3. Enter the integration name and the credentials:

  • Subdomain: Use the domain for the region that your OneLogin account resides in
    • US:
    • EU:
  • Client ID, Client Secret: use credentials generated in ‘Generate an API credential pair’.
  1. Click Integrate