Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.serval.com/llms.txt

Use this file to discover all available pages before exploring further.

About OneLogin

OneLogin is a cloud identity and access-management platform that lets organisations manage users, roles, and application access. Connecting OneLogin to Serval enables user and resource sync, role-based access provisioning, and automation workflows directly from chat.

What the OneLogin integration enables

CapabilityDescription
User syncIngest the full OneLogin user directory into Serval
App syncIngest the OneLogin app catalog into Serval
Resource syncIngest OneLogin roles (modeled as Serval groups) and role membership
Access managementAdd and remove users from OneLogin roles via workflows
In OneLogin, Roles are what most identity providers call User Groups — users gain access to applications via role membership. OneLogin Groups (which are security policies) are intentionally not modeled as Serval resources. Anything defined in the OneLogin API can also be called from custom workflows.

Setup

1. Create an API credential in OneLogin

  • Log into your OneLogin admin console
  • Navigate to Developers > API Credentials
  • Click New Credential
  • Give it a name (e.g. Serval) and pick a scope (see below)
  • Click Save
  • Copy the Client ID and Client Secret. The secret is only shown once.

2. Pick the right scope

OneLogin API credentials use a single coarse-grained scope per credential. Pick the lowest scope that covers the capabilities you want:
ScopeEnables in Serval
Read usersUser sync only
Read allUser sync, app sync, resource (role) sync
Manage allAll read capabilities plus access management (add/remove users from roles)
If you want full Serval functionality, pick Manage all. If you only need read-only sync, Read all is enough. Read users alone will not ingest apps or roles.

3. Connect in Serval

  • In Serval, go to Applications and click Connect New +
  • Find OneLogin and click Connect
  • Enter:
    • Subdomain: your OneLogin domain, e.g. acme.onelogin.com (without https://)
    • Client ID: from step 1
    • Client Secret: from step 1
  • Click Submit
Your OneLogin integration is connected. Confirm it is configured correctly by running the health checks in the API Integration tab.

Support

If you need assistance with the Serval OneLogin integration, please contact us at support@serval.com.