We have just released the OneLogin extension for Safari 5. Besides being compatible with Safari 5, the new extension is also completely Javascript-based, which means it's more lightweight, more robust and simply easier to deal with in all aspects.

Uninstall old OneLogin extension

If you are using old OneLogin extension, you should uninstall it before proceeding. Using the Finder, go to /Applications/OneLogin and run Uninstall.

Upgrade to Safari 5

If you have not already upgraded to Safari 5, you can do so via Software Update in Mac OS X or by downloading it directly from Apple.

Install new OneLogin extension

To install the new extension, simply go to onelogin.com/downloads and download it.  

Most of us like to use the fewest clicks possible to reach any particular application. Google Apps for Domains acts as umbrella for Mail, Docs, Calendar and Sites as well as any apps you have added from Google Apps Marketplace.

When you use SAML to log into Google Apps for Domains, you can still link directly to the underlying apps and it works very well with OneLogin. The URLs are going to look something like this:

 https://mail.google.com/a/mycompany.com/?tab=om#inbox
 https://www.google.com/calendar/hosted/mycompany.com/render?tab=oc&...
 https://docs.google.com/a/mycompany.com/?tab=mo&AuthEventSource...

Once you have logged into Google Apps, go to Mail, Docs, Calendar, Sites and add bookmarks for them in your browser's bookmarks bar. Now, if you click on any of those links, you will be taken directly to them. If you are not already logged into Google Apps, OneLogin will log you in automatically. And if you're not logged into OneLogin either, you will be taken directly to the link you clicked after you have logged in.

Policies allow you to define OneLogin password requirements and IP address restrictions at different levels in your account. You can define as many policies as you want and apply them to specific groups or individual users. The default policy will apply for any user that has no user or group policy.

A policy has the following settings:

• User passwords expire in – the number of days between forced OneLogin password changes
• Enforce password history – allows you to prevent users from reusing old OneLogin passwords
• Minimum password length – the minimum required length of OneLogin passwords 
• Password complexity requirement – defines the minimum required password complexity, e.g. alphanumeric and special characters
• Maximum invalid login attemps – maximum consecutive failed login attemps before account is locked 
• Lock effective period –  number of minutes a user's login is locked after failed login
• IP address restrictions – allows you to restrict access to individual IP addresses