OneLogin Configuration

This guide describes how to configure uStudio’s OneLogin application. This is an ideal solution if your identity provider is OneLogin. Manage users and groups with SAML and SCIM protocols. Experience uStudio Enterprise Podcast with single sign-on (SSO) via SAML. Perform create, read, update, and delete (CRUD) operations on users and groups via SCIM. These actions give you more flexibility in controlling your uStudio user base in real time.

Features

Assign Users - through OneLogin to uStudio Enterprise Podcast with automatic provisioning.

Assign Groups - through OneLogin to uStudio Enterprise Podcast. You’re now managing SAML groups. You will need to configure SAML with groupName assertion and to map these groups by setting the Company SSO Group Name to the name of the group in OneLogin as described here. These groups will be updated every time a user logins.

Push Profile Updates - through OneLogin to uStudio Enterprise Podcast. The first name, last name, and primary email can be changed.

Push User Deactivation - through OneLogin to uStudio Enterprise Podcast by unassignment. Users will no longer have access and their profile information and analytics will be retained.

Push User Reactivation - through OneLogin to uStudio Enterprise Podcast by assignment. Users will have access again and their analytics will continue to be tracked.

Prerequisites

Please contact [e-mail] to establish a service account and receive your Company Code, TOKEN, ACCOUNT-UID, and CONNECTION-UID.

Configuration

You have the choice to configure the uStudio application with SAML or SCIM or both protocols.

Info

1. Log into OneLogin as an administrator.
2. Go to Applications and add the uStudio application.
3. In the Info section, set Display Name to "uStudio Audience SSO."
4. Set Visible in portal to off.
   

Configuration

1. In the Configuration section, set Account ID to your ACCOUNT-UID.
2. Set SAML Audience URL to urn:auth0:ustudioinc:prod-companycode-podcast-sso
3. Set SAML Consumer URL to https://ustudioinc.auth0.com/login/callback?connection=prod-companycode-podcast-sso
4. Set Connection UID to your CONNECTION-UID.
5. Enable SCIM by setting SCIM Bearer Token to your TOKEN and click Enable on API Connection.
   

Parameters

1. In the Parameters section, determine if you want to enable Groups. If so, click the groupName parameter for enablement.
2. Select Value with Groups you want access to the uStudio app.
3. Set Default if no value selected to "No default" and "Semicolon Delimited input (Multi-value output)".
4. Also, make sure the "Include in SAML assertion" and "Include in User Provisioning" is checked.
5. Then, click Save.
   

SSO

1. In the SSO section, set SAML Signature Algorithm to SHA-256.
2. Send uStudio Support your X509 Certificate and Sign-on URL or metadata XML file. This can be obtained by the Issuer URL.

Access

1. In the Access section, select the Roles you want access to the uStudio app.

Provisioning

1. In the Provisioning section, check Enable provisioning.
2. Disable Create user, Delete user, and Update user unless you want a OneLogin admin to approve.
3. Set "When users are deleted in OneLogin, or the user's app access is removed, perform the below action" to Suspend.
4. Set "When users are deleted in OneLogin, or the user's app access is removed, perform the below action" to Suspend.
   

Users

1. In the Users section, users who have access and are provisioned the uStudio app should have a green checkmark.

Testing

Once you’re done configuring uStudio’s OneLogin application, please login into the admin and user applications to test out functionality. Then notify uStudio Support, so we can confirm that the SAML and SCIM connections are successfully established.

Admin Applications

HUB: https://app.ustudio.com

PMC: https://podcast-admin.ustudio.com

User Applications

Mobile

1. Download uStudio Enterprise Podcast from Google Play or Apple Store.
2. Enter Company Code.
3. Sign-in with your user credentials.

Web

Sign in with your user credentials at https://podcast-web.ustudio.com/COMPANYCODE.

Updates

When we update uStudio’s OneLogin application, we will notify you and provide any specific instructions for that update.

Troubleshooting

SCIM Username or userName - in OneLogin cannot be changed because it is bound to an account in uStudio. We recommend creating a new user if the person doesn't wish to use a certain email address as their userName. However, it is possible to change the first name, last name, and primary email address.

If you have any questions or concerns with our OneLogin integration, please contact [e-mail].