Prerequisite
Please see our SSO with OneLogin help article to set up your app in OneLogin before proceeding with these steps.
Getting Started
When setting up Group sync from OneLogin to WorkRamp is to navigate to the “Provisioning” tab in the left sidebar. On the “Provisioning” page underneath the “Entitlements” section, click on the “Refresh” link at the bottom of the page.
Refreshing Entitlements will pull any Groups that have already been created in WorkRamp into OneLogin - this ensures that OneLogin will be aware of these Groups when you set up mappings to them.
Next, click on the “Parameters” tab on the left sidebar. On the “Parameters” page, click on the row in the table with Field Name: “Groups.”
In the “Edit Field Groups” pop-up window, search for and add the Groups that already exist in WorkRamp to the Groups you want to include in user provisioning. Make sure you check off the “Include in User Provisioning” flag to ensure that membership will be synced for these Groups.
Navigate to the “Rules” tab on the left sidebar and click the “Add Rule” button on the top left side of the page.
In the Rule pop-up window, define the mapping that fits your use case.
Under the “Actions” section, if you choose “Map from OneLogin”, OneLogin will create a Group in WorkRamp that maps to the Group defined by this rule. If you choose “From Existing”, OneLogin will add the users who match the rule only to the Groups that you add.
Once finished setting up your Rule, click Save.
In the “More Actions” dropdown at the top of the page, select “Reapply entitlement mappings”. This will calculate which OneLogin users match each rule, and it will sync matching OneLogin users to the appropriate Group in WorkRamp.
That’s it - your WorkRamp Groups should now be synced based upon OneLogin Rules!
SCIM Provisioning
If interested in setting up SCIM Provisioning, please see our help article here.