What's New


April 21st, 2017

ServiceNow and ServiceNow Express Safe Entitlement

Safe entitlements enable you to use OneLogin to provision users into ServiceNow Roles without impacting existing ServiceNow Role assignments. Before making changes to users in ServiceNow or ServiceNow Express, OneLogin first identifies the users that were not added by ServiceNow and then proceeds with user provisioning, leaving users not added by OneLogin untouched.

Read More »


April 21st, 2017

Workday Realtime

OneLogin's new Workday integration now supports realtime updates for employee offboarding. When you add the OneLogin integration system to your Workday employee offboarding workflows, users will be instantly suspended from application access as soon as their termination is complete in Workday. This improves security, as we now instantly remove a terminated employee’s access to sensitive files and applications.

Read More »


March 30th, 2017

OneLogin OTP with QR Registration & Push

OneLogin OTP 2.2 supports push notifications to streamline MFA usage. Sign in to OneLogin using your username and password, receive an access request on your phone, click Accept, and you're logged in. Support for Android coming soon. OneLogin OTP 2.2 also simplifies the MFA registration process for iOS devices by using QR barcodes or improved manual code entry.

Read More »


March 30th, 2017

Adaptive Authentication

Adaptive Authentication scores the risk of each login attempt and challenges users who make high-risk logins to use an additional authentication factor. Previously, administrators created user policies to indicate if MFA was required to access a resource. Now Adaptive Authentication enables administrators to require MFA for login attempts above a certain risk level, which is calculated from a broad set of inputs, including networks, geography, devices, and time.

Read More »


March 15th, 2017

Firefox & Safari with Add App

We have added Firefox and Safari to the browsers that support the Dynamic App Catalog. The new Add App dialog prompts you to save your login credentials whenever you sign into a new app or website, so the app is ready for you in the OneLogin portal the next time you need it. Mark the app as personal if it's just for you. If you use it for work, mark it as a company app, and admins can make it available to other users in your organization. It's a quick and easy way to build your company's app catalog.

Read More »


March 14th, 2017

Edge Browser Extension

This is our inaugural release of the OneLogin for Edge browser extension. We are the first SSO provider to have a browser extension for Edge, and we are one of the very few vendors approved to provide their Edge extensions through the Windows Store. The Edge extension ships with a dropdown menu, one-click login, type-as-you-search, and the detection of new logins (Add App).

Read More »


March 6th, 2017

New Extensions: Chrome w/ Add App

Our new Add App dialog lets you save your login credentials whenever you sign into a new app or website, so it's ready for you on the OneLogin portal the next time you need it. Mark the app as personal if it's just for you. Mark it as a company app if you use it for work; your admin can make it available to other users in your OneLogin account. The new Add App is available now for Chrome, and it's coming soon to your other favorite browsers.

Read More »


February 28th, 2017

LDAP Directory Connector v2

Our fresh release of the LDAP Directory Connector is a complete rewrite that improves performance, scales to directories of over a million users, and works reliably with virtually any standard LDAPv3 schema--even extended schemas. It's a snap to install, configure, and tune. And it provides near feature parity with the Active Directory Connector, bringing support for OneLogin-to-LDAP provisioning, password resets, and user authentication.

Read More »


January 31st, 2017

ServiceNow Express

For those folks who opted for ServiceNow Express over ServiceNow Enterprise we now offer the same best-in-class SAML SSO and User Provisioning features its big brother has. If you're considering ServiceNow and are under 5000 users, now you don't have to opt for the more expensive enterprise solution just to get user provisioning.

Read More »


January 31st, 2017

Active Directory Connector v5

Our latest major revision of OneLogin Active Directory Connector performs better than ever, and it's easier to use with firewalls and HTTP proxies. The Active Directory Connector v5 release keeps all the good stuff from v4 and adds improved multiplexing, new runtime libraries and web sockets over port 80/443 that make it firewall-friendly, and HTTP proxy support with Windows domain authentication. This version requires Windows Server 2012+ and .NET 4.5.

Read More »


January 24th, 2017

OneLogin Desktop for Mac 2.1

OneLogin Desktop for Mac just keeps getting better. A PAM module on your Mac manages authentication. No more prompts for your keychain password when you change your OneLogin password. Improved FileVault support. And did we mention that now you can enable OneLogin Desktop for any account on your Mac, without having to migrate user data?

Read More »



January 11th, 2017

Help Desk Privilege

Now your support team can view user details, unlock users, reset passwords, invite users, force logouts, and more. Delegate user management rights to your support team without giving them the keys to the kingdom. The new Help Desk privilege provides just the access your support team needs.

Read More »


December 15th, 2016

OneLogin Desktop for Windows 2.0

We did it for Mac and now it's on Windows! We've brought certificate-based SSO to Windows, giving users the ability to log in to their OneLogin portal or SSO-enabled apps without having to provide their credentials again in their browser. Simply install OneLogin Desktop for Win 2.0 and watch the magic happen...

Read More »


December 15th, 2016

Improved Provisioning Workflow

OneLogin now offers faster resolution of user provisioning issues and faster processing of application access requests. First, if you encounter any issues provisioning users to applications, or have users that need to be approved for an app, our new filtering features allow you to quickly identify those users. Second, once you've narrowed down your view to just the users that require processing, you can apply bulk operations like "approve" or "retry" to quickly resolve provisioning issues or clear out your provisioning workload.

Read More »


December 1st, 2016

Better CSV uploads. Way Better.

Meet the new CSV user upload functionality which lets you import users in bulk using a comma-separated values (CSV) file. It's bigger, better, and looks terrific, if we may say so! Now you can map more user fields, including your custom attributes. You can add and update attributes to existing users. And our new CSV template helps you get started faster.

Read More »


December 1st, 2016

App Admin is Here

App Admin is making its OneLogin debut. Want to allow other members of your organization to manage applications, but you don't want to give them full administration access? We've got you covered. You now have the ability to delegate admin rights for a single app (or more), and you can rest assured that your delegated admins are managing only these app-specific permissions and nothing more.

Read More »


November 17th, 2016

MFA Factors with Multiple Devices

Do you have Google Authenticator on more than one device? Do you want to use all of your Google Authenticator devices for multi-factor authentication in OneLogin? Now you can. OneLogin MFA now enables registration of more than one device per authentication method for OneLogin OTP, Google Authenticator, and Symantec VIP Access factors.

Read More »


November 10th, 2016

New Extensions: Safari with Dropdown

The new dropdown menu is coming to Safari. Search-as-you-type, Click to Launch. The fastest way to find and launch your cloud apps. User must first install this version from their Profile page. (The extension will later be available through the Safari Extensions Gallery.)

Read More »


November 7th, 2016

Trusted IdP Encrypted Attributes

Some trusted IdP providers have security policies that require the encryption of assertions sent with a SAML response. When you configure Trusted IdPs, you can now provide a subdomain-specific public key to identity providers for assertion encryption, and we'll detect and handle decryption automatically upon receipt.

Read More »