Knowledge Base

Set up OneLogin SSO

1. Log in to your OneLogin account
   
2. Go to the Applications section.
   
3. Click the button to add a new app and search for "SAML Custom Connector (Advanced)."
   
4. Select the Info tab.
   
5. Set your preferred display name (ex. "Teamwork.com"). You can optionally add icons — official Teamwork.com icons can be found in Teamwork.com's Press Media Kit.
   
6. In the Configuration tab, enter the following details in their corresponding fields:
   
1. RelayState: 
   

   https://{{YOUR_TEAMWORK_DOMAIN}}/launchpad/saml/start
   
2. Audience: 
   

   https://{{YOUR_TEAMWORK_DOMAIN}}/ 
   

   ⚠️ The trailing slash is required.
   
3. Recipient: 
   https://{{YOUR_TEAMWORK_DOMAIN}}/singlesignon/v1/saml/acs
4. ACS (Consumer) URL Validator: ^https:\/\/{{YOUR_TEAMWORK_DOMAIN}}\/singlesignon\/v1\/saml\/acs$ 
   

   📝 This is a regex. If your domain has any special non-alphanumeric characters, you may need to escape them.
   
5. ACS (Consumer) URL:
   https://{{YOUR_TEAMWORK_DOMAIN}}/singlesignon/v1/saml/acs
7. In the Parameters tab, add the following fields:
   

   ⚠️ Make sure to check the box "Include in SAML assertion" for each field.
   
1. Field name: "email" | Value: "Email"
   
2. Field name: "firstname" | Value: "First Name"
   
3. Field name: "lastname" | Value: "Last Name"
   
8. Save your changes. You can adjust the other settings in the other tabs as you wish, but no further configuration is required in OneLogin to connect to Teamwork.com.
   
9. Click More Actions at the top of the screen and select SAML Metadata. This downloads the metadata XML that you will need to submit in the SSO submission request via your Teamwork.com SSO site settings.
   

• OneLogin SAML quick start
  
• Advanced SAML Custom Connector