# Use Shuffl with OneLogin

> Connect OneLogin to push people and groups to Shuffl and sign everyone in, and see what Shuffl does with it.

Audience: HR and IT administrators

Kind: How-to guide

Canonical: https://shuffl.ai/docs/onelogin

<a id="overview"></a>
## What OneLogin does in Shuffl

OneLogin can push people, groups and departments to Shuffl over SCIM and sign everyone in.

You need to be a Shuffl workspace administrator, with an administrator in OneLogin for the steps there.

- [Shuffl + OneLogin](https://shuffl.ai/integrations/onelogin)

<a id="connect"></a>
## Push people from OneLogin

1. In Shuffl, open Settings → Workspace → Integrations → Provisioning and choose New SCIM connection. Copy the base URL and the token, which is shown once.

2. In OneLogin, turn on SCIM 2.0 provisioning for a Shuffl app. Paste the base URL into SCIM Base URL and the token into SCIM Bearer Token.

3. Turn on creating, updating and deactivating users, send the work email as the user name and assign the people who belong in Shuffl.

4. Back in Shuffl, under Who gets workspace access?, choose Everyone assigned to this app or Selected groups only, then Save access policy.

5. To use a pushed group in Shuffl, open People → Sync, choose Groups on the SCIM card and turn it on.

- [Open Provisioning](https://shuffl.ai/app/settings/company/provisioning)

- [Provisioning in detail](https://shuffl.ai/docs/employee-access#provisioning)

<a id="what-comes-in"></a>
## What comes in

OneLogin sends each change as it happens. Shuffl only reads; it never changes anything in OneLogin.

OneLogin’s values replace People’s on every update, so fix a wrong title or manager in OneLogin. A blank keeps what People has.

### From OneLogin into Shuffl

- Everyone, with names and work emails
- Job titles
- Departments
- Teams and groups, the ones you choose
- Leavers

<a id="what-hr-gets"></a>
## What it does for HR

### In Shuffl

- Departments become department groups, so Pulse, eNPS and Culture compare teams without exposing anyone.
- Teams you bring in become synced groups for Pulse questions, automations, Connections and messages.
- Suspended or removed accounts lose their Shuffl access.
- Mello knows each person’s title, manager and department when it answers.

<a id="sign-in"></a>
## Sign in with OneLogin

1. In Shuffl, open Settings → Workspace → Integrations → Single sign-on, choose Add connection and pick OpenID Connect. Keep the values it shows open.

2. In OneLogin Administration, open Applications, add the OpenId Connect (OIDC) app.

3. Paste the login URL into Login Url and the redirect URI into Redirect URI’s. On the SSO tab, set Token Endpoint Authentication Method to Basic.

4. Give users access through a role or directly, then copy the client ID and secret. The issuer is your OneLogin domain followed by /oidc/2.

5. Add the DNS TXT record the connection shows at your DNS provider, then choose Check DNS record until it reads Verified.

6. In a private window, choose Sign in with SSO with a work email that is in People with access enabled.

Single sign-on proves who someone is; People still decides who gets in. Set up People first, and password sign-in keeps working while you test.

- [Open Single sign-on](https://shuffl.ai/app/settings/company/sso)

- [Verify and test](https://shuffl.ai/docs/single-sign-on#verify-and-test)

<a id="good-to-know"></a>
## Good to know

OneLogin signs SAML with SHA-1 by default, which Shuffl refuses. Choose SHA-256 and sign Both.

<a id="alongside"></a>
## With your other systems

OneLogin sends no managers or start dates. Connect your HR system for those, or set them in People.

- [Which source wins](https://shuffl.ai/docs/people-sync#what-syncs)

<a id="fix"></a>
## If it stops working

If people stop arriving, read the provisioning errors in OneLogin. Tokens expire after 90 days: choose Rotate token in Shuffl, paste the new one into OneLogin, test it, then revoke the old one.

Unassigning someone in OneLogin suspends their access at once. Restoring them doesn’t undo a suspension made by hand.

- [Fix a connection](https://shuffl.ai/docs/people-sync#runs)

- [Troubleshooting](https://shuffl.ai/docs/troubleshooting)

## Related guides

- [Sync People from your HR system](https://shuffl.ai/docs/people-sync)

- [Groups](https://shuffl.ai/docs/groups)

- [Playbooks and onboarding](https://shuffl.ai/docs/playbooks)

- [Set up single sign-on and directory provisioning](https://shuffl.ai/docs/single-sign-on)

- [Switch to Shuffl from your current tools](https://shuffl.ai/docs/switch-to-shuffl)

Agent documentation index: https://shuffl.ai/llms.txt