Documentation Index

Fetch the complete documentation index at: https://support.appgate.com/llms.txt

Use this file to discover all available pages before exploring further.

Integrate OneLogin with ZTP using OIDC

  • Published on Jun 17, 2026
  • 1 minute read
Prev Next

Prerequisites

This integration requires the following:

  • A OneLogin account with admin credentials

  • An active ZTP account, accessible using the Bootstrap Identity provided by AppGate

  • A test user account on OneLogin with at least the following attributes configured:

    • email, for example: joe.smith@mycompany.com

    • firstName, for example: Joe

    • lastName, for example: Smith

Step 1: Add a new custom connector in OneLogin

  1. In your OneLogin console, go to Applications > Custom Connectors.

  1. Click New Connector.

  1. Complete the connector configuration using the following values:

Field

Value

Name

AppGate ZTP

Sign on method

Select Open ID Connect

Redirect URI

Enter your ZTP account’s main page URL, for example: https://01010.appgate.net

Post logout redirect URI

Enter a placeholder URL, for example: https://example.com. You will replace this value after completing the ZTP configuration form.

Login URL

Enter your ZTP account’s main page URL, for example: https://01010.appgate.net

  1. Leave all other fields at their default values and click Save.

  2. In the More Actions drop-down menu on the right, select Add App to Connector.

  1. Enter a display name, for example: AppGate ZTP, and click Save.

Step 2: Configure the application

  1. In the left menu, select SSO and go to the Token Endpoint section.

  2. Set Authentication Method to Post.

NOTE

Completing this step is required. OneLogin defaults to a different authentication method, which can cause errors during integration.

  1. Record the following values. You will need them to complete the ZTP configuration form:

    • Client ID

    • Client Secret

    • Issuer URL

  1. Leave all other fields at their default values and click Save.

Step 3: Configure the IdP in ZTP

  1. In ZTP, go to Settings > Identity Providers in the left menu.

  2. Click Add New and select Open ID provider.

  3. Complete the form using the following values:

Field

Description

Name*

OneLogin - OIDC

Audience*/Client ID*

Values recorded in Step 2.

Client Secret*

Authentication URL*

The Issuer URL recorded in Step 2, appending /auth to the end

Token URL*

The Issuer URL recorded in Step 2, appending /token to the end

User Info URL

The Issuer URL recorded in Step 2, appending /me to the end

JWKS URL

The Issuer URL recorded in Step 2, appending /certs to the end

Email Attribute*

email

First Name Attribute*

given_name

Last Name Attribute*

family_name

Username Attribute*

username

  1. Copy the Redirect URI from the ZTP configuration form by clicking the copy to clipboard button.

  1. In OneLogin, return to the custom connector configured in Step 1 and replace the placeholder URL (https://example.com) in the Post Logout Redirect URI field with the Redirect URI you copied from ZTP.

  2. Click Save and test the integration.

Related articles