What's New



January 11th, 2017

Help Desk Privilege

Now your support team can view user details, unlock users, reset passwords, invite users, force logouts, and more. Delegate user management rights to your support team without giving them the keys to the kingdom. The new Help Desk privilege provides just the access your support team needs.

Read More »


December 15th, 2016

OneLogin Desktop for Windows 2.0

We did it for Mac and now it's on Windows! We've brought certificate-based SSO to Windows, giving users the ability to log in to their OneLogin portal or SSO-enabled apps without having to provide their credentials again in their browser. Simply install OneLogin Desktop for Win 2.0 and watch the magic happen...

Read More »


December 15th, 2016

Improved Provisioning Workflow

OneLogin now offers faster resolution of user provisioning issues and faster processing of application access requests. First, if you encounter any issues provisioning users to applications, or have users that need to be approved for an app, our new filtering features allow you to quickly identify those users. Second, once you've narrowed down your view to just the users that require processing, you can apply bulk operations like "approve" or "retry" to quickly resolve provisioning issues or clear out your provisioning workload.

Read More »


December 1st, 2016

App Admin is Here

App Admin is making its OneLogin debut. Want to allow other members of your organization to manage applications, but you don't want to give them full administration access? We've got you covered. You now have the ability to delegate admin rights for a single app (or more), and you can rest assured that your delegated admins are managing only these app-specific permissions and nothing more.

Read More »


December 1st, 2016

Better CSV uploads. Way Better.

Meet the new CSV user upload functionality which lets you import users in bulk using a comma-separated values (CSV) file. It's bigger, better, and looks terrific, if we may say so! Now you can map more user fields, including your custom attributes. You can add and update attributes to existing users. And our new CSV template helps you get started faster.

Read More »


November 17th, 2016

MFA Factors with Multiple Devices

Do you have Google Authenticator on more than one device? Do you want to use all of your Google Authenticator devices for multi-factor authentication in OneLogin? Now you can. OneLogin MFA now enables registration of more than one device per authentication method for OneLogin OTP, Google Authenticator, and Symantec VIP Access factors.

Read More »


November 10th, 2016

New Extensions: Safari with Dropdown

The new dropdown menu is coming to Safari. Search-as-you-type, Click to Launch. The fastest way to find and launch your cloud apps. User must first install this version from their Profile page. (The extension will later be available through the Safari Extensions Gallery.)

Read More »


November 7th, 2016

Trusted IdP Encrypted Attributes

Some trusted IdP providers have security policies that require the encryption of assertions sent with a SAML response. When you configure Trusted IdPs, you can now provide a subdomain-specific public key to identity providers for assertion encryption, and we'll detect and handle decryption automatically upon receipt.

Read More »


October 28th, 2016

New Extensions: Firefox with Dropdown

We did it for Chrome last week. Now it's time for Firefox! The new drop-down menu is the fastest way to find and launch all of your business and personal apps. Without switching browser tabs, you can search for any of your apps and sign in with a single click. Go to www.onelogin.com/downloads/browser-extensions to get it.

Read More »


October 20th, 2016

New Extensions: Chrome with Dropdown

The new drop-down menu is the fastest way to find and launch all of your business and personal apps. Without switching browser tabs, you can search for, and sign into any of your apps with a single click. This will automatically roll out gradually to all customers -- you may already have it.

Read More »


October 20th, 2016

User Policy: Browser Extension Controls

Now admins can set User Policies to determine whether users can see the browser extension link on their Profile page. This is great for segmenting your users and controlling who gets the browser extension, since everyone will want it, especially the new Chrome browser extension with the drop-down menu!

Read More »


October 18th, 2016

Force Logout

Now you can force your users to log out of OneLogin. This is especially handy if you suspect a security breach and you need to reset user passwords directly in an external directory like AD, because a password reset alone won't necessarily destroy active user sessions in OneLogin. You can force it on an individual user or through bulk actions.

Read More »


October 18th, 2016

User Search Improvements

We've improved the User search on the All Users page -- it is the beginning of a broader overhaul. Any combo of name and filter works, and it's easy to add and remove filters. Give it a try.

Read More »


October 13th, 2016

Real-time Event Streaming

Now you can stream OneLogin application security events to SIEM systems (and other consumers) like Sumo Logic, Splunk, and ELK. This happens in real time, with none of the delays of polling, so you can instantly investigate over 200 different event types, including:

  • Which users and groups are accessing which apps, when, from where, and on which device
  • User creation, activation, deactivation, deletion, role assignment, failed logins, and lockouts
  • Creation, update, and deletion of policies, proxies, LDAP, RADIUS, VPN, and Desktop SSO configurations
Read More »


October 7th, 2016

Namely Directory Service

Continuing our march to support All The HR Directories, we're happy to announce support for Namely! We are seeing more and more companies using their HR systems to automate identity provisioning, and now we can seamlessly import users from Namely into the OneLogin directory.

Read More »


October 6th, 2016

Sign SAML certs with SHA-2

Take control of your SAML certificates! Now you can select whether to sign your certs with SHA1, SHA256, or SHA512. And choose the expiration period. As more SAML-enabled service providers start requiring the greater security of SHA-2, you'll be ready.

Read More »


October 5th, 2016

What's new added to UI

Wonder what's coming next from the OneLogin team? Forget searching the web... we're bringing the updates directly to you! Now you can view all the hottest updates from your friends at Onelogin right in your portal. Too much info coming your way? No problem. Simply turn off the notification — it's still there for you when you're ready to get back in the game.

Read More »


September 28th, 2016

AWS Multi-Account Virtual Provisoning

Do you have several different AWS accounts such as production, staging and test? With OneLogin you can protect access to AWS while letting admins single sign-on into all accounts with least privilege roles.

OneLogin's rules engine lets you automatically map multiple accounts and multiple roles to your OneLogin directory users, and show this mapping with one icon on our SSO Portal -- much simpler than showing one icon per account-and-role combination. Your AWS admins can then use the portal to log in to the AWS console and view all accounts and roles assigned to them (e.g. VPC Read Only, S3 Power User, EC2 Full Access), and use the least privilege role for the critical task at hand.

This lets you avoid using excessive amounts of JSON to configure access across multiple AWS accounts and roles, and provides greater auditability of who can access which AWS resources.

Read More »


September 21st, 2016

Branded notifications

If you've seen one, you've seen them all! Starting today, all of your Onelogin notifications will reflect your company's brand. The email branding template isn't just for new user invitations anymore -- now it applies to all notifications.

Read More »