Directory integration is very popular with our customers so we have decided to provide even more directory sugar by introducing new directory types and enhancing the capabilities of the existing ones. When you navigate to People -> Directories and add a new directory, you will see the following page:

In addition to Active Directory and LDAP, you can now also sync users from any SaaS application that supports user provisioning and the Google Apps integration has gotten some new capabilities.

LDAP user synchronization

OneLogin has long had the capability to authenticate against LDAP directories and create users on-the-fly as they authenticate. This release now also periodically imports users to OneLogin.

Google Apps as a directory

The Google Apps directory type now also supports authentication, which means that users can sign into OneLogin using their Google Apps password. At the same time we are deprecating the ability to sign into to OneLogin with your Google Apps session, since this use confuses most users and also reduces IT's ability to control access. For a limited time, you can still sign in using your Google session at https://app.onelogin.com/google-login, but this will disappear in a future release.

SaaS application as a directory

In some cases  you want to use a particular application as your primary user store, for example a Human Resource Management applications like Workday. OneLogin now has the ability to use select applications in this way. Users will be synchronized at regular intervals, but will be authenticated by OneLogin or by a directory of your choice.

Staging of imported users

Customers love OneLogin's directory ability to integrate with their existing directory, but after a large number of implementations the verdict is clear: directories are dirty. We regularly come across customers who have 2-4 times as many directory entries as they have real employees. Now you can choose to filter all new imported users through a staging area where you can approve or reject imported entries on an individual basis. Once you reject an entry, you will never have to deal with that user again. You can even remove already created users back to the staging area.

RADIUS server interface generally available

Branded subdomain

You can now specify a subdomain that users can go to instead of app.onelogin.com. The custom subdomain will automatically redirect to app.onelogin.com with your branding applied. Expect more to come here very soon.