OneLogin integrations

OneLogin integrations

→

AFAS Profit → OneLogin

AFAS to OneLogin integration: OneLogin users with roles from AFAS Profit

→

Nmbrs → OneLogin

Nmbrs to OneLogin integration: OneLogin users from payroll

→

Workday → OneLogin

Workday to OneLogin integration: Workday as a directory in OneLogin, with OneLogin's connectors

→

Visma Raet YouForce → OneLogin

YouForce to OneLogin integration: OneLogin users from Visma YouForce

→

HiBob → OneLogin

HiBob to OneLogin integration: OneLogin users from Bob, with the HiBob integration or custom

→

Nedap ONS → OneLogin

Nedap ONS to OneLogin integration: care staff and team roles in OneLogin

Systems you can connect OneLogin with

How KoppelHet connects to OneLogin

OneLogin API v2 including POST /api/2/users to create users, with fields for department, title, manager, roles and custom attributes.

Authentication: OAuth 2.0 access token via client credentials

Objects we connect

• Users with department, title and manager_user_id
• Roles (role_ids) and group (group_id)
• Custom attributes and status

What a OneLogin integration does

• AFAS Profit, HiBob, Personio → to OneLogin

  User with roles from HR

  A new employee from AFAS, HiBob or Personio becomes a OneLogin user with department and title. Roles follow from the job, so the right apps are ready.

  AFAS Profit → OneLogin integrationHiBob → OneLogin integrationPersonio → OneLogin integrationIdentity and access management

• AFAS Profit, Nmbrs → to OneLogin

  Employee number as a custom attribute

  The employee number is stored in custom_attributes, so the integration finds users again after a name change.

  AFAS Profit → OneLogin integrationNmbrs → OneLogin integrationIdentity and access management

• HiBob, Personio → to OneLogin

  Status on leaving

  After the last working day the integration sets the user's status so they can no longer sign in.

  HiBob → OneLogin integrationPersonio → OneLogin integrationIdentity and access management

What to watch for

• The manager is a OneLogin user ID, not an employee number. The integration looks up the manager first and then fills manager_user_id.

In your IT landscape

• Runs as a managed integration on the KoppelHet platform, next to your existing integration layer. No VPN into your network.
• Only the fields in the design you approve are transferred. The platform keeps no register of its own.
• Tested first in the test or acceptance environment where there is one. You choose the go-live moment.
• ISO 27001 certified, hosted in Amsterdam. When the contract ends you receive the configuration and the audit logs.

Implementation, architecture and compliance

Processes with this system

• Identity and access management