Skip to main content

Connect OneLogin to Anzenna

Integrate Anzenna with OneLogin to monitor user authentication, application access, and identity management events.

Prerequisites​

  • OneLogin administrator access
  • Anzenna account

  • Ability to create API credentials in OneLogin

Overview​

The integration provides:

  • User directory and authentication logs
  • Application access monitoring
  • Role and group assignments
  • Security events and alerts
  • Login activity tracking

Step-by-Step Instructions​

Part 1: Create API Credentials in OneLogin​

  1. Navigate to your OneLogin admin dashboard

  2. URL format: https://<your-subdomain>.onelogin.com/admin2

  3. Click Developers in the navigation menu

  4. Select API Credentials

  5. Click New Credential

  6. Enter a descriptive name: 

    Anzenna

  7. Under Permissions, select Read all

  8. Click Save

This grants read-only access to all OneLogin data

Part 2: Copy Credentials​

  1. After creation, you'll see two values:
  2. Copy the Client ID
  3. Copy the Client Secret
Important

Save both values immediately. The Client Secret is only shown once.

  1. Click Done to complete credential creation

Part 3: Connect to Anzenna​

  1. Log into Anzenna at

    app.anzenna.ai

  2. Navigate to Settings > Integrations

  3. Find the OneLogin integration card

  4. Toggle the switch to enable the integration

  5. Paste the Client ID into the designated field

  6. Enter your OneLogin subdomain

  7. Example: If your URL is acme.onelogin.com, enter acme

  8. Enter the complete API URL: 

    https://<your-subdomain>.onelogin.com

  9. Paste the Client Secret into the secret field

  10. Click Save to establish the connection

Verification​

  1. Verify integration shows Connected status

  2. Wait 15-30 minutes for initial data sync

  3. Navigate to Anzenna's Users dashboard

  4. Confirm user data from OneLogin is appearing

  5. Check authentication logs are visible

What Data is Collected​

User Information​

  • User directory
  • Email addresses
  • Names and attributes
  • Account status
  • Custom fields

Authentication Data​

  • Login events
  • Failed authentication attempts
  • MFA usage
  • Session information
  • IP addresses

Application Data​

  • Assigned applications
  • Application usage
  • Access permissions
  • SSO configurations

Role and Group Data​

  • Role assignments
  • Group memberships
  • Permission sets

Security Events​

  • Security alerts
  • Policy violations
  • Risk indicators
  • Suspicious activity

Managing the Integration​

Checking Connection Status​

  1. Go to Anzenna > Integrations

  2. Review OneLogin status indicator
  3. Check last successful sync timestamp
  4. Review for error messages

Regenerating Credentials​

If credentials are compromised:

  1. In OneLogin, go to Developers > API Credentials

  2. Find the Anzenna credential

  3. Click Delete

  4. Create new credential with same permissions

  5. Update credentials in Anzenna

  6. Click Save

Testing Connection​

  1. Check for recent login events in Anzenna
  2. Compare user counts between systems
  3. Verify recent authentication logs appear
  4. Test search functionality

Troubleshooting​

Connection Fails​

"Invalid credentials" error:

  • Verify Client ID copied correctly
  • Ensure Client Secret is complete
  • Check no extra spaces in values

  • Confirm credentials weren't deleted in OneLogin

No Data Appearing​

Users not syncing:

  • Wait 30 minutes for initial sync
  • Verify "Read all" permission was granted
  • Check API URL format is correct

  • Ensure subdomain matches your OneLogin instance

API URL Issues​

Cannot connect to API:

  • Verify subdomain is correct
  • Check HTTPS protocol is used
  • Ensure no trailing slash in URL
  • Confirm URL is accessible from network

Permission Errors​

403 Forbidden responses:

  • Verify Read all permission is selected
  • Ensure credentials are active
  • Check organization API settings

  • Confirm no IP restrictions blocking Anzenna

Security Considerations​

  • Credential security - Store Client Secret securely

  • Read-only access - Integration only reads data

  • Audit logging - All API calls logged in OneLogin

  • Principle of least privilege - Read all is minimum needed

  • Regular reviews - Audit integration quarterly

Best Practices​

  1. Document subdomain - Record for future reference

  2. Secure credentials - Store in password manager

  3. Monitor sync status - Check weekly after setup

  4. Test after setup - Verify data flow immediately

  5. Set calendar reminders - Periodic integration health checks

  6. Backup credentials - Keep secure copy of Client ID/Secret

  7. Review permissions - Annual audit of API access

Integration Maintenance​

Regular Checks​

Perform monthly:

  • Verify connection active
  • Check data freshness
  • Review sync timestamps
  • Test sample queries

During OneLogin Updates​

After platform updates:

  • Test API connectivity
  • Verify data still syncing
  • Check for new available fields
  • Update documentation if needed

Credential Rotation​

If required by security policy:

  1. Create new credentials in OneLogin
  2. Test new credentials in staging
  3. Update Anzenna configuration
  4. Verify connection successful
  5. Delete old credentials

API Rate Limits​

OneLogin enforces API rate limits:

  • Default: 2,500 requests per hour

  • Enterprise: Higher limits available

  • Monitoring: Check usage in OneLogin admin

If you hit rate limits:

  • Anzenna will automatically retry
  • Sync may be delayed temporarily

  • Contact OneLogin support to increase limits

Need help? Contact

Anzenna Support

for assistance.