> **Building with AI coding agents?** If you're using an AI coding agent, install the official Scalekit plugin. It gives your agent full awareness of the Scalekit API — reducing hallucinations and enabling faster, more accurate code generation.
>
> - **Claude Code**: `/plugin marketplace add scalekit-inc/claude-code-authstack` then `/plugin install <auth-type>@scalekit-auth-stack`
> - **GitHub Copilot CLI**: `copilot plugin marketplace add scalekit-inc/github-copilot-authstack` then `copilot plugin install <auth-type>@scalekit-auth-stack`
> - **Codex**: run the bash installer, restart, then open Plugin Directory and enable `<auth-type>`
> - **Skills CLI** (Windsurf, Cline, 40+ agents): `npx skills add scalekit-inc/skills --list` then `--skill <skill-name>`
>
> `<auth-type>` / `<skill-name>`: `agent-auth`, `full-stack-auth`, `mcp-auth`, `modular-sso`, `modular-scim` — [Full setup guide](https://docs.scalekit.com/dev-kit/build-with-ai/)

---

# OneLogin - OIDC

This guide walks you through configuring OneLogin as your OIDC identity provider. You'll create an OIDC application, add the redirect URI, provide the required OIDC values in the SSO Configuration Portal, assign access, test the connection, and then enable Single Sign-On.

1. ## Create an Application

   Sign in to the **OneLogin Admin Console**. Go to **Applications -> Applications**.

   ![Open the Applications menu in the OneLogin Admin Console](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-applications-menu.png)

   Click **Add App**.

   ![Applications page in OneLogin with the Add App button highlighted](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-add-app-button.png)

   In the **Find Application** search box, search for **OpenId Connect (OIDC)** and select it from the results list.
   ![OneLogin Find Application results with OpenId Connect (OIDC) selected](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-openid-connect-app-selection.png)

   Add suitable application name in **Display Name** field and optionally upload an icon. Then click **Save**.
   ![OneLogin OIDC application form with Display Name and icon upload fields](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-openid-connect-app-details.png)

2. ## Add Redirect URI

   From the **SSO Configuration Portal**, copy the **Redirect URI** under **Service Provider Details**.
   ![SSO Configuration Portal showing the OneLogin OIDC Redirect URI](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-sso-portal-redirect-uri.png)

   On OneLogin, navigate to **Configuration** tab. Paste the copied URI into **Redirect URIs** section and then click **Save**.
   ![OneLogin Configuration tab with Redirect URIs section populated for the OIDC app](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-redirect-uri-configuration.png)

3. ## Provide OIDC Configuration

   On OneLogin, Navigate to **SSO** tab. Copy the **Client ID**, **Client Secret** and **Issuer URL**.
   ![OneLogin SSO tab showing Client ID, Client Secret, and Issuer URL](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-client-id-client-secret-and-issuer-url.png)

   Add these values under **Identity Provider Configuration** in the **SSO Configuration Portal**, then click **Update**.
   ![SSO Configuration Portal fields for OneLogin Client ID and Client Secret](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-sso-portal-client-credentials.png)
   ![SSO Configuration Portal showing the OneLogin Issuer URL after update](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-sso-portal-issuer-url.png)

4. ## Assign Users/Groups

   On OneLogin, navigate to **Users** tab and click the user you want to assign to the application.
   ![OneLogin Users tab with a user selected for application assignment](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-users-tab-select-user.png)

   Once the user page opens, navigate to **Applications** tab from the left-side menu. Then click on **+** symbol.
   ![OneLogin user Applications tab with the add application action](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-user-applications-add-application.png)

   Select the recently created OIDC application from the **Select application** dropdown and click on **Continue**.
   ![OneLogin application assignment dialog with the new OIDC app selected](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-user-applications-select-application.png)

5. ## Test Single Sign-On

   In the **SSO Configuration Portal**, click **Test Connection** to verify your configuration.
**Note:** If the connection fails, you'll see an error, the reason for the error, and a way to solve that error right on the screen.

6. ## Enable Connection

   Once the test succeeds, click **Enable Connection** to allow assigned users to sign in with OneLogin OIDC.
   ![SSO Configuration Portal with Enable Connection button for OneLogin OIDC](@/assets/docs/guides/sso-integrations/onelogin-oidc/onelogin-enable-connection.png)

   This completes the OneLogin OIDC SSO setup for your application.

---

## More Scalekit documentation

| Resource | What it contains | When to use it |
|----------|-----------------|----------------|
| [/llms.txt](/llms.txt) | Structured index with routing hints per product area | Start here — find which documentation set covers your topic before loading full content |
| [/llms-full.txt](/llms-full.txt) | Complete documentation for all Scalekit products in one file | Use when you need exhaustive context across multiple products or when the topic spans several areas |
| [sitemap-0.xml](https://docs.scalekit.com/sitemap-0.xml) | Full URL list of every documentation page | Use to discover specific page URLs you can fetch for targeted, page-level answers |