Configure OneLogin as SAML Identity Provider:

Register an application with OneLogin and create a service principal

1. Sign in to your OneLogin account.
2. Select Apps → Add Apps.
3. Search for SAML Test Connector and choose it.
4. Change the Display Name and Logo of the app.
5. Click SAVE.

6. Go to Configuration and setup the below:

   Login URL	https://www.app4legal.com/site/xxxx/users/login_idps/onelogin
   ACS (Consumer) URL*	https://www.app4legal.com/site/xxxx/saml/www/module.php/saml/sp/saml2-acs.php/app4legal-onelogin
   SAML Recipient	https://www.app4legal.com/site/xxxx/saml/www/module.php/saml/sp/saml2-acs.php/app4legal-onelogin
   SAML Single Logout URL:	https://www.app4legal.com/site/xxxx/saml/www/module.php/saml/sp/saml2-logout.php/app4legal-onelogin
   ACS (Consumer) URL Validator*	https://www.app4legal.com/site/xxxx/saml/www/module.php/saml/sp/saml2-acs.php/app4legal-onelogin
   Audience	https://www.app4legal.com/site/xxxx/saml/www/module.php/saml/sp/metadata.php/app4legal-onelogin

   

   
   

7. Go to More Actions → download SAML Metadata (to be imported as Metadata File at Lexzur).
8. Go to Parameters and add new field called "email" with the value of the user email.
9. Go to Users →  add the concerned users to this app
   
   

Create Client ID & Client Secret

1. Go to Developers → API Credentails
2. Click New Credentials
3. Create new API credential
4. Copy Client ID & Client Secret (to be pasted at Lexzur).

Configure OneLogin as SAML Service Provider

Enable SSO in Lexzur

1. Sign in to your Lexzur instance Lexzur.

2. Go to the Settings → Single Sign On →Setup .

3. Select OneLogin 
4. Paste Client ID & Client Secret (copied before from OneLogin).
5. Upload Metadata File (downloaded before from OneLogin).
6. Click Save

Import Users from OneLogin to Lexzur

1. Go to the Settings → Users & Permissions →Import Users from OneLogin.
2. Look up the users and choose the appropriate User Group.