Skip to content
shuffl
Get started

Searches the public product guides only. Nothing from a workspace is read, and questions are not saved.

How-to guide

Use Shuffl with OneLogin

Connect OneLogin to push people and groups to Shuffl and sign everyone in, and see what Shuffl does with it.

For HR and IT administrators

Have your agent do thisPaste the prompt into Claude Code, Cursor or another agent. It follows this guide over MCP and asks before it changes anything others will see.Show the prompt
Help me with "Use Shuffl with OneLogin" in my Shuffl workspace.

1. Read the guide: https://shuffl.ai/docs/markdown/onelogin
2. Add Shuffl's MCP server: https://shuffl.ai/api/mcp
   Claude Code: claude mcp add --transport http shuffl https://shuffl.ai/api/mcp
   When the browser opens, choose my workspace and allow the access the guide needs.
3. Work through the steps in order: Push people from OneLogin; Sign in with OneLogin. Do what you can over MCP and tell me which steps only I can do in the browser or in Slack.

Show me what you will change and who it affects, and wait for my yes before publishing, inviting or sending anything.
On this page

App links open your signed-in workspace. Check the selected workspace before making changes.

What OneLogin does in Shuffl

OneLogin can push people, groups and departments to Shuffl over SCIM and sign everyone in.

You need to be a Shuffl workspace administrator, with an administrator in OneLogin for the steps there.

Push people from OneLogin

  1. In Shuffl, open Settings → Workspace → Integrations → Provisioning and choose New SCIM connection. Copy the base URL and the token, which is shown once.
  2. In OneLogin, turn on SCIM 2.0 provisioning for a Shuffl app. Paste the base URL into SCIM Base URL and the token into SCIM Bearer Token.
  3. Turn on creating, updating and deactivating users, send the work email as the user name and assign the people who belong in Shuffl.
  4. Back in Shuffl, under Who gets workspace access?, choose Everyone assigned to this app or Selected groups only, then Save access policy.
  5. To use a pushed group in Shuffl, open People → Sync, choose Groups on the SCIM card and turn it on.

What comes in

OneLogin sends each change as it happens. Shuffl only reads; it never changes anything in OneLogin.

OneLogin’s values replace People’s on every update, so fix a wrong title or manager in OneLogin. A blank keeps what People has.

From OneLogin into Shuffl

  • Everyone, with names and work emails
  • Job titles
  • Departments
  • Teams and groups, the ones you choose
  • Leavers

What it does for HR

In Shuffl

  • Departments become department groups, so Pulse, eNPS and Culture compare teams without exposing anyone.
  • Teams you bring in become synced groups for Pulse questions, automations, Connections and messages.
  • Suspended or removed accounts lose their Shuffl access.
  • Mello knows each person’s title, manager and department when it answers.

Sign in with OneLogin

  1. In Shuffl, open Settings → Workspace → Integrations → Single sign-on, choose Add connection and pick OpenID Connect. Keep the values it shows open.
  2. In OneLogin Administration, open Applications, add the OpenId Connect (OIDC) app.
  3. Paste the login URL into Login Url and the redirect URI into Redirect URI’s. On the SSO tab, set Token Endpoint Authentication Method to Basic.
  4. Give users access through a role or directly, then copy the client ID and secret. The issuer is your OneLogin domain followed by /oidc/2.
  5. Add the DNS TXT record the connection shows at your DNS provider, then choose Check DNS record until it reads Verified.
  6. In a private window, choose Sign in with SSO with a work email that is in People with access enabled.

Single sign-on proves who someone is; People still decides who gets in. Set up People first, and password sign-in keeps working while you test.

Good to know

OneLogin signs SAML with SHA-1 by default, which Shuffl refuses. Choose SHA-256 and sign Both.

With your other systems

OneLogin sends no managers or start dates. Connect your HR system for those, or set them in People.

If it stops working

If people stop arriving, read the provisioning errors in OneLogin. Tokens expire after 90 days: choose Rotate token in Shuffl, paste the new one into OneLogin, test it, then revoke the old one.

Unassigning someone in OneLogin suspends their access at once. Restoring them doesn’t undo a suspension made by hand.

Was this guide helpful?