How to setup SSO for OneLogin

This guide covers the steps to setup SSO for OneLogin. 

Before you begin

Setting up SSO involves configuring both your identity provider and Fireflies. Here's what you need to know before starting:

What you'll need

• Admin access to both your identity provider (Azure AD/Okta/JumpCloud/OneLogin) and your Fireflies account

• About 10-15 minutes to complete the full setup process

• Two browser tabs - one for your identity provider, one for Fireflies

Important setup requirement

⚠ Critical step: Before you start the SSO configuration process, you must either:

• Log out of your current Fireflies session, OR

• Open the SSO setup link in an incognito/private browser window

This prevents session conflicts that can cause setup issues.

How the process works

1. Configure your identity provider - Set up the basic SAML application and get the necessary URLs and certificates

2. Configure Fireflies - Use the information from step 1 to set up SSO at app.fireflies.ai/auth/sso

3. Complete the connection - Return to your identity provider with the final details from Fireflies

Ready to start?

Once you have admin access and have logged out of Fireflies (or opened an incognito window), you can begin the configuration process below.

Setup SSO for OneLogin

• Login to Onelogin.

• Click Applications and click Add App.

• Search for SAML Custom and select SAML Custom Connector (Advanced).  

• Create the application with a name for example: "Fireflies SAML app". Upload the logo and description. Now, click Save.

• Click the SSO tab. 

• From the SSO tab, click View Details next to the X.509 Certificate. 

• Copy the X.509 Certificate. 

• Head over to the link: https://app.fireflies.ai/auth/sso and validate your domain. Then, input the IDP sign in URL and x.509 certificate and hit Configure SSO.

• Once this is done, you will receive the postback URL from Fireflies, also known as the ACS consumer URL within OneLogin. This will have to be entered.

  • The unique login URL for your team that you can share with your team. Your teammates will have to access this URL to log in to Fireflies.

    

📌Enforced SSO Redirect Behavior

When SSO is enforced on your domain:

Users will be automatically redirected to your organization's SSO login link when they attempt to log in via Google or Microsoft OAuth.

This happens after the OAuth authentication succeeds—at which point Fireflies checks if your domain has an enforced SSO configuration and triggers the redirect.

Avoid this behavior

If your users don't want automatic redirects, have them use your unique SSO login link instead of the generic Google or Microsoft login options.