Overview: OneLogin is a cloud-based identity and access management solution that enables organizations to manage and secure user identities, enforce access controls, and streamline authentication across internal systems and external applications.
When integrated with Buddy Punch, OneLogin allows employees to sign in using their existing organizational credentials.
Important! The OneLogin SSO can only be used with the Buddy Punch website. Additionally, OneLogin SSO access is only available to users on the Enterprise plan.
Instructions:
Prerequisites
To set up Single Sign-On (SSO) with OneLogin, a few requirements must be met before we can begin the integration process, which include:
Your company must be on the Buddy Punch Enterprise Plan.
The person requesting SSO setup must be an Administrator on your Buddy Punch account.
Once both prerequisites are confirmed, you can move on to the next section covering how to Initiate SSO Setup in Buddy Punch.
Initiate SSO Setup in Buddy Punch
Once both prerequisites are confirmed as detailed here, you can then reach out to our team to initiate the SSO setup process.
This can either be done by contacting our support team at [email protected] or by using the in-app chat in the bottom right-hand corner of your Buddy Punch Administrator account:
After verification, we’ll provide your organization with our SAML metadata file, which is used to configure the connection between OneLogin and Buddy Punch.
Important! We only offer IDP-initiated SAML SSO at this time.
In return, we'll need your team to provide the following:
App Federation Metadata URL
Login URL (Optional, if you don't want your employees to be directed to our login page from our emails)
OneLogin Issuer / Entity ID
Once we have that information, it will take approximately one business day to get SSO enabled on the account.
Enable SSO in OneLogin
After receiving the Buddy Punch SAML metadata file, you’ll complete the setup in your OneLogin Admin Portal by configuring Buddy Punch as a custom SAML application.
The steps include:
Sign in to your OneLogin Admin Portal.
Navigate to Applications → Applications → Add App.
Search for SAML Custom Connector (Advanced) and select it.
Enter a name for the app (e.g., Buddy Punch) and save.
Under the Configuration tab, upload or paste the Buddy Punch SAML metadata file you received from our team.
In the SSO tab, verify or enter the required identifiers (Entity ID, ACS/Consumer URL, etc.) using the metadata provided.
Under Users, assign the employees or groups who should have access to Buddy Punch.
For OneLogin’s full step-by-step documentation on setting up SAML apps, please see their official guide.
After our team follows up to confirm the SSO is live, you can proceed with testing the OneLogin SSO connection to ensure everything is working correctly.