Install OneLogin Desktop for Macs (4266574)

Install OneLogin Desktop for Macs

This document details how to install and uninstall OneLogin Desktop for the macOS. This document is intended for Admins. The End-User Installation Guide is found here.

The latest version of OneLogin Desktop (3.2.2) is compatible with the following macOS versions:

• Ventura (13.x.x)
• Monterey (12.x.x)
• Big Sur (11.x.x)

Earlier versions of OneLogin Desktop are not compatible with macOS Monterey or later.

Swift 5 Runtime Support is required and included in macOS from Mojave on.

Prerequisites

• Admin account. Your Mac must have at least one admin account that is not running OneLogin Desktop.
• No AD. Macs can't join an Active Directory domain.
• OneLogin users. Both username and user email are required for users in the OneLogin cloud directory and cannot be blank.
• No device MFA. Device MFA is not currently supported for macOS. Be sure to clear this setting in the user's Security policy: "Apply MFA policy requirement when logging into laptop and desktop devices". For users on both Windows and Mac devices, create a separate policy if MFA is desired for device login on Windows.
• Connect to the Internet. Access to OneLogin services is required during installation.
• Browsers and certificates. Chrome or Safari are required to use either the PKI certificate or the OneLogin Desktop certificate to provide access to the OneLogin portal or SSO-enabled apps without having to reauthenticate. Enabling both options may result in the certificate being rejected by the browser.

Package Download

Installer packages for admins can be accessed by navigating to the OneLogin Admin Portal > Devices > OneLogin Desktop.
 

Users can download the installer package from their OneLogin Portal Profile under the OneLogin Desktop tab.

Uninstall

It's safest to uninstall your old version of OneLogin Desktop prior to upgrading. To ensure complete removal, execute the uninstall from the command line instead of dragging the application to the Trash.

To uninstall OneLogin Desktop:

sudo sh /Library/Application\ Support/OneLogin/uninstall

Interactive Mode

Double-click the package file for either OneLogin Desktop or OneLogin Desktop Pro to start the installation.

1. When you see This package will run a program to determine if the software can be installed., click Allow.

2. On the Introduction page, click Continue.

3. On the Terms of Service page, click the link to review the agreement for your organization and then click Agree to accept the terms.

      4. On the Subdomain page, enter the subdomain for your organization and click Continue.

5. For Destination Select, choose the hard drive and click Continue.

\
6. For Installation Type, confirm the space available and click Install.

7. At the system prompt "Installer is trying to install new software.", enter your local Admin password and click Install Software.

8. The installation process begins. At the system prompt "Installer would like to administer your computer.", click OK.

9. When the installation is complete, you may close the installer.

Account Binding

To complete the setup of OneLogin Desktop Pro, the OneLogin account must be associated with a local account on the Mac. During the binding process, the local password will be changed to that of the OneLogin password for the user currently logged in. The user will then sign in to their device with their OneLogin password and access the OneLogin Portal via a certificate installed on the device.
 

To complete account binding:

1. Following installation, the Tray App connects to OneLogin services and opens a login prompt. Log in with your OneLogin credentials.
 

2. At the prompt for Mac Account Password, enter the password for your local Mac account and click Next.
 

3. OneLogin Desktop Pro now binds your OneLogin account to your macOS account. The account binding process takes a minute or so and displays "Installing" while working.

4. When the process is complete, the Tray App displays a page with your password expiration status and links to the OneLogin Portal. The password on your local Mac account has been changed to that of your OneLogin account. You will now use your OneLogin password to sign in to your Mac and to access the Mac keychain.

OneLogin Portal

After successfully authenticating with OneLogin via the Tray App or device sign-in, a OneLogin certificate is installed that provides access to the OneLogin Portal.

To access the OneLogin Portal:

1. From the Tray App, click OneLogin Portal.

2. At the browser prompt to select a certificate, select your OneLogin certificate and click Continue.
 

3. At the browser prompt for the keychain password, enter your OneLogin password and click Always Allow. If you click the default Allow, the browser will repeat the keychain prompt.

You now have access to the OneLogin Portal and will not need to reauthenticate with OneLogin.

Logs and Diagnostics

The log files for OneLogin Desktop are most easily located by opening the Console app on your Mac and selecting Log Reports.

The log files are located in this folder:

Library/Logs/

• OneLoginDesktop.log
• OneLoginDesktopInstaller.log
• OneLoginDesktopAuth.log (Pro only, after device login)
• OneLoginDesktopAgent.log
• OneLoginDesktopDaemon.log

The system install.log can also be useful for diagnostics.

To create a ZIP file of OneLogin Desktop log files for diagnostic purposes, open the Terminal and type

sudo /usr/local/bin/oldesktop diagnostics