Articles in this section

See more

Configuring SAML for Pantheon

These steps will guide you through setting up the Single Sign-On functionality between OneLogin and Pantheon.

Setting Up OneLogin

Starting in the OneLogin admin dashboard portal, do the following:

  1. Go to Apps > Add Apps.
  2. Search for Pantheon that is a SAML 2.0 connector and select it.

    You may edit the Display Name if desired.
  3. Click Save.
  4. Select the Configuration tab.
  5. Under Pantheon Org Domain, put the domain of your organization's Pantheon URL.
  6. Click Save.
  7. Select the Parameters tab.
  8. Ensure that Credentials are Configured by admin and that the mappings are as follows:
    NameID -> Email
  9. Click Save.
  10. Select the SSO tab.
  11. Copy down the SAML2.0 Endpoint (HTTP) URL.
  12. Click View Details.
  13. Select the Clipboard Icon to copy the entirety of the SHA-1 Fingerprint.
  14. Make a ticket to your Pantheon support team that includes:
    • Your organization's email domain that was configured in step 5
    • Your OneLogin SHA-1 Fingerprint
    • Your OneLogin SAML HTTP Endpoint

With the configuration complete, OneLogin and Pantheon should be connected through SAML!

Troubleshooting Email Mismatch

In some cases, the Pantheon account admin email may not match the OneLogin admin email. This can be remedied by doing the following:

  1. Go to Users > Account_Owner.
  2. Select the Applications tab.
  3. Select Pantheon to open the Edit Login pane.

Here you may overwrite the default fields for your Pantheon login and insert the correct information to match your OneLogin credentials with your Pantheon credentials.