> ## Documentation Index
> Fetch the complete documentation index at: https://help.cloudtalk.io/llms.txt
> Use this file to discover all available pages before exploring further.

# OneLogin SSO Setup

> How to retrieve values and input redirect URI needed for OneLogin SSO setup

> [!NOTE]
>
> **Why should you use OneLogin SSO?**
>
> The use of SSO improves enterprise security by reducing the amount of login surfaces employees must use. It is important to use a trusted IAM (Identity Access Management) provider in order to make sure SSO is deployed safely and properly. With the help of identity providers such as OneLogin, CloudTalk admin users can streamline administrative tasks, control user privileges, and provide an accessible and secure way for employees to launch CloudTalk applications.

***

## How to set up OneLogin SSO on your Dashboard

In order to ensure a proper setup process, please make sure you have the following:

* **Admin** privileges for a **CloudTalk** account

* **Admin** privileges for a company **OneLogin** domain

### Steps for CloudTalk Dashboard

1. Settings for SSO must be adjusted by an admin through the Dashboard. From the left sidebar, click **Settings > Single Sign On**. There you will be able to see available options for SSO in the form of toggle buttons.

   ![Single Sign On settings with toggles for each SSO provider](https://mintcdn.com/cloudtalk/60GToHGL127SHeYH/images/Screenshot-2026-10-16-at-14.59.32-3.png?fit=max\&auto=format\&n=60GToHGL127SHeYH\&q=85\&s=d2c753f88cd22aaa39275bd8fbae7090)

2. Admins can toggle *On/Off* to enable or enforce:

   * **Google SSO**

   * **[Azure SSO](/en/articles/5912324-microsoft-azure-sso-setup)**

   * **[Okta SSO](/en/articles/5996603-okta-sso-setup)**

   * **Keycloak SSO**

   * **Onelogin SSO**

   Click the toggle button to `Enable OneLogin SSO`.

   ![OneLogin SSO enabled in Single Sign On settings](https://mintcdn.com/cloudtalk/60GToHGL127SHeYH/images/Screenshot-2026-10-16-at-15.13.44.png?fit=max\&auto=format\&n=60GToHGL127SHeYH\&q=85\&s=2073dfb24a2700a2e4d42dcf75fe7090)

3. Once OneLogin SSO has been enabled, admin will be asked to fill in the following values:

   * **Client ID**

   * **Client Secret**

   * **Discovery URL** (sometimes called "Resource/Issuer URL")

     ```text theme={"system"}
     For OneLogin, the Discovery URL format will be: 
     https://<subdomain>.onelogin.com/oidc/2
     Where <subdomain> is to be replaced with the admin user's actual OneLogin subdomain.
     ```

   * **Method** (**GET** or **POST**)

4. It will be necessary to enter a "**redirect URI**" into an appropriate field on the interface of the respective identity provider—in this case, OneLogin. In the following steps, admin users will be required to log into their **OneLogin account** from a separate tab in order to obtain the above value references and to input the **redirect URI**, which is necessary for authorization to work properly.

```text theme={"system"}
For all identity providers, including OneLogin, the redirect URIs will be the following:
https://authsso.cloudtalk.io/oauth2/idpresponse
https://cloudtalk-prod.auth.eu-central-1.amazoncognito.com/oauth2/idpresponse
```

## Steps for OneLogin

![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/49b8634dd8e2-onelogin-main-page-cens.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=2f7f0049f27d593f491fc46b65ae1ae4)

1. From the black toolbar at the top of your OneLogin admin account, scroll over **`Applications`**, selecting **Applications**.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/198b61ac09ac-onelogin-click-applications.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=61b33b2c4c92027e13180b5bd129b81e)

2. Account users who already have an established application running on OpenId protocol may be able to skip to step 4 for configuring the redirect URI into the existing app and obtaining the necessary values. If no OpenId protocol application has yet been created, we will need to make a new one. This can be done by first searching `OpenId Connect` in the *Applications* page search bar.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/e6588da56529-search-openid-connect.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=a5217d679d26cc94ae1d9a377dca820c)

3. When **OpenId Connect (OIDC)** pulls up, select this option. Clicking the application from this page will bring you to the **Portal** for your OIDC app. You can adjust the **Display Name** and click **`Save`** to finish the initial configuration.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/358dafcce52d-one-login-oidc-portal.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=458d9bca9c5bb7a69ffd7fa291abb502)

4. You will now be shown a list of tabs related to your OIDC application. To set our Redirect URI for CloudTalk, we can navigate to the **Configuration** tab and copy/paste the Redirect URI into the **Redirect URI's** section:

   ```text theme={"system"}
   https://authsso.cloudtalk.io/oauth2/idpresponse
   https://cloudtalk-prod.auth.eu-central-1.amazoncognito.com/oauth2/idpresponse
   ```

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/fa05dbd38b27-onelogin-redirect-uri-filled.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=195b7a8e44a147b2f437cb429467ef35)

5. **Client ID** and **Client Secret** can be found within the **SSO** tab under the top section, *Enable OpenID Connect.*

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/ae8a2dc13bdd-onelogin-client-id-isolated.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=db328701b8910ec214cf324d1d2d4cdb)

6. Click to **`Show client secret`**, then copy/paste.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/37dde8855dca-onelogin-client-secret-censored.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=65e76267fbfb00871661d211f3ed4b03)

7. Under these values, we can also copy/paste the **Issuer URL** listed here. This is synonymous with the Discovery URL we will need to input to CloudTalk's settings for SSO setup.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/aa84ed8f10fc-onelogin-issuer-url-censored.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=1765692e0bea57a91e8a5330902bcce8)

8. Below the *Application Type* header on this page, ensure that the **Application Type** is set to `Web`. Beneath *Token Endpoint*, the **Authentication Method** should be set to `POST`.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/09c92c13551c-token-endpoint-post-onelogin.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=8818350b092e6ce64cbd1e69077fbcb3)

9. If not already done, you can add app admins by searching for and adding the desired user via the **Privileges** tab.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/b29eb281d162-onelogin-add-users-edited.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=eaea995e6b4336ab3ad2bfa4d9c947ff)

10. Having configured our app and obtained the necessary values, we will switch back to our **CloudTalk Dashboard tab** to copy and paste the **Client ID**, **Client Secret**, and **Discovery URL** (from **Issuer URL**) into their appropriate boxes.

    ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/51c9cfe7d422-onelogin-enabled-values-filled-censored.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=4d8f09ee98933e8e227f6f3d19cdb47f)

11. `POST` should work for the **Method**, though `GET` can be tried.

***

## Enabling OneLogin SSO on CloudTalk Phone

The settings chosen through the Dashboard will affect what users see on all CloudTalk login screens. When enabled, a button labeled **`Continue with SSO`** should be viewable on login screens\_.\_

![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/336aad0ec7e6-screenshot-2024-12-18-at-13-10-59.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=86cc80bfb39ef9a0cfd3e34875578d0e)

Selecting this option, users will be prompted to enter their CloudTalk email.

![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/ee515f6ff9d5-screenshot-2024-12-18-at-13-12-36.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=e518e65f7d56cf7bf74608c0c381e697)

Choose which available SSO you would like to login with.

![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/ce630ea69ea1-okta-or-onelogin-buttons.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=a187cd658c21d9a7423e5d57d1decc49)

Signing in with OneLogin for the first time, a popup login screen will appear, where you can enter your OneLogin username and password.

![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/021c3bc12638-onelogin-credentials-login.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=0669284de1d299fb8f75fa54549b52aa)

After a successful login, you should see the regular dialer appear along with the green dot next to the user, indicating the user is online and active.

![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/6028218/05d51da3a9da-logged-in-and-active.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=897658d510d900c5bc6c6fa427b8e643)

***

*Need help or have a question?* Just reach out through our [Support portal](https://support.cloudtalk.io/hc/en-us/requests/new?ticket_form_id=26305535257884) — we’re here for you.


## Related topics

- [Account Settings Guide](/en/articles/10550593-account-settings-guide.md)
- [How to Use SSO](/en/articles/5784952-how-to-use-sso.md)
- [Okta SSO Setup](/en/articles/5996603-okta-sso-setup.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.