How to Configure Single Sign-On in Thinfinity VirtualUI using OneLogin as an IDP
Product: Thinfinity VirtualUI
Versions: 3 and later
Introduction
In this document, we will walk you through the process of configuring Single Sign-On (SSO) in Thinfinity VirtualUI, with OneLogin serving as the Identity Provider (IDP). SSO simplifies the user experience by providing easy and secure access to VirtualUI applications, streamlining the login process.
Setup OneLogin as an OAuth Provider
- First of all, go to https://app.onelogin.com/login and log into your Onelogin account.
- Click on Administration.
- You will be presented with the following screen. Hover on Applications and then click on Applications below.
- Click on the Add App Button.
- You will be shown a search list. Search for OIDC (OpenID Connect) and click on the search result as shown below.
- Then, you will be shown a configuration screen. Fill in the Display Name and other details as required, then click on Save.
- You will be redirected to the app details page. Go to the Configuration tab and enter the Redirect URI’s from Thinfinity VirtualUI OAuth/OpenID Connect plugin in the form https://<virtualui-server-url>:<port>/OneLogin and click on Save.
- Now, go to the SSO tab. There you will find the Client ID and Client Secret fields. Copy these credentials for later use in Thinfinity VirtualUI OAuth/OpenID Connect Plugin configuration on corresponding fields.
- Make sure to change the Token Endpoint configuration to POST too, then Save.
Assign Users to OneLogin SSO Application
- Hover on the Users tab and click on the Users option from the menu.
- You will see the list of users available on your OneLogin platform. Select the user you want to give access to your application.
- Now for that user, go to the Applications tab from the left menu and click on the blue + icon to add the application.
- Select the application from the drop down list for which you want to allow SSO for that user and click on Continue.
- Complete the configurations and click on the Save button.
- The application will be listed in the user profile as shown in the image below and now this user can SSO into Thinfinity VirtualUI using his OneLogin credentials for this application.
You have successfully installed the OneLogin Identity Platform as an OAuth provider, enabling user authentication and authorization to the Thinfinity VirtualUI using OneLogin OAuth SSO with a single set of credentials.
Configure OneLogin into Thinfinity VirtualUI
For OneLogin SSO authentication to work, the binding must be HTTPS (SSL). To know more check How to Install an SSL Certificate in Thinfinity VirtualUI.
- First, you should open the Thinfinity VirtualUI Server Manager and go to the Authentication tab, click the Add button then select Oauth2.0 > Other.
You must disable the Allow anonymous access option.
- Once the Oauth method has been added, type the Name and Virtual Path of the Authentication Method. Then, on the General tab, fill in the ClientID and Client Secret fields with the credentials you copied earlier in OneLogin setup.
- Now, on the Server tab, fill in the details we've seen in previous steps, as shown in the example below.
You can follow this chart as an example to fill in the details of the specified fields in the image above.
Authorization URL: | https://<your-onelogin-domain>.onelogin.com/oidc/2/auth |
Authorization parameters: | scope=openid |
Custom redirect URL: | https://<virtualui-server-url>:<port>/OneLogin |
Token Validation Server URL: | https://<your-onelogin-domain>.onelogin.com/oidc/2/token |
- After you have filled in the details, the next step is to go to the Mappings tab on the Authentication tab of Thinfinity VirtualUI Server Manager, and map the OneLogin user to a user on your network.
- Start by clicking Add, and enter the OneLogin ID Mask, then click OK.
- Next, while we have selected the OneLogin user we just added, click Add on Associated Permissions and select the user on your network to whom you want to assign the OneLogin credentials.
- When finished, click Apply.
Once this is done, OneLogin will appear on your Portal as a login option for VirtualUI.
Conclusion
In conclusion, this document has equipped you with the knowledge and steps necessary to configure Single Sign-On (SSO) in Thinfinity VirtualUI, with OneLogin as the Identity Provider (IDP). By simplifying the authentication process, SSO offers an easy and secure way to access VirtualUI applications.
If you have any further inquiries or need additional support, please do not hesitate to reach out to us. Our team is always available to help address any questions or concerns you may have.
Related Articles
Thinfinity VirtualUI: Publishing an Application
Product: Thinfinity VirtualUI Version: 3 and above Introduction Thinfinity VirtualUI is a software solution designed to facilitate web integration for Windows-based applications. This guide will walk you through the process of getting started with ...Thinfinity® VirtualUI Injector: User Guide
Introduction The Thinfinity® VirtualUI Injector is a powerful tool designed to simplify and accelerate the application virtualization process using the Thinfinity VirtualUI protocol on the Workspace Server. This advanced injector seamlessly ...How to Install an SSL Certificate in Thinfinity VirtualUI
Product: Thinfinity VirtualUI Version: 3 and above Introduction An SSL certificate is an effective way to secure a website against unauthorized data interception. In its simplest form, it is used to identify the website and encrypt all data flowing ...How to set up permissions for an application in Thinfinity VirtualUI
Product: Thinfinity VirtualUI Version: 3 and above Introduction To guarantee appropriate access for each user, it's important to set up permissions in the Application Profiles Editor found in the Thinfinity VirtualUI Server Manager. We'll cover the ...How to Publish an Application in Thinfinity VirtualUI Server
Product: Thinfinity VirtualUI Version: 3 and above Introduction This step-by-step tutorial will guide you through the process of virtualizing your applications and making them accessible from any web browser using Thinfinity VirtualUI. Get ready to ...