How To Set Up Your Own OneLogin App (SAML)
Last updated 05/29/2026
Step 1
Log in to your OneLogin account.
Step 2
Navigate to the Administration panel, then go to the Applications tab.
Step 3
Click Add App at the top right of the page.
Step 4
- Search for: SAML Custom Connector
- Click on SAML Custom Connector (Advanced) to add it.
Step 5
For Display Name, enter your organization's name and click Save.
Step 6
Go to Configuration in the left menu, and enter the following information:
- For the ACS (Consumer) URL Validator field, enter:
https:/\/\api.breadbutter.io/\callback - For the ACS (Consumer) URL field, enter:
https://api.breadbutter.io/callback - Click Save.
Step 7
- Go to Parameters in the left menu, and click the "+" to add parameters
- Add the following parameters:
- Field name: FirstName and value: First Name
- check "Include in SAML assertion"
- Field name: LastName and value: Last Name
- check "Include in SAML assertion"
- Field name: Email and value: Email
- check "Include in SAML assertion"
- Field name: PersonImmutableID and value: Onelogin ID
- check "Include in SAML assertion"
- Field name: FirstName and value: First Name
- Click Save.
Step 8
Go to SSO in the left menu, and take note of the following information:
- Issuer URL
- SAML 2.0 Endpoint (HTTP)
- X.509 Certificate (View Details)
Step 9
Go to Users in the top nav, and edit your users to give them access to the app.
Step 10
Bread & Butter Setup:
- Go to https://app.breadbutter.io/sign-in/
- Click Sign In and authenticate (or Sign Up make a new account and authenticate).
- Go to Settings in the left menu.
- Click on the OneLogin button under Global Conversion Methods > Enterprise Connections.
- Choose SAML for the protocol.
- Enter a name.
- Enter a description (optional).
- Enter the Issuer URL & SAML 2.0 Endpoint (HTTP) from the OneLogin setup steps above.
- Enter the X.509 Certificate from the OneLogin setup steps above. Do not include -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----.
- Click Save.
- Enable OneLogin by clicking the new entry in the OneLogin Identity Providers list.