OneLogin OpenID SSO

Create OneLogin Account and register Zone Employee Portal application

Step 1: Create a OneLogin account

(If you already have one, skip this step)

1. Go to onelogin.com

2. Register and create an organization

3. Choose your organization name when prompted

Step 2: Create a OneLogin application for Zone Employee Portal

1. Log in to your OneLogin account

2. Go to the Applications tab

3. Click Add App

4. Search for and select OpenId Connect (OIDC) using the filter

5. Name the app something like "Zone Employee Portal", then click Save

App Configuration:

Under Configuration section:

• Set Redirect URI to:

  • https://api.mypay.management/v1/ext-auth-callback (for global accounts)

  • https://api-eu.mypay.management/v1/ext-auth-callback (for EU region accounts)

Under SSO section:

• Set Token Endpoint Authentication Method to POST

• Note down the Client ID and Client Secret – you’ll need these for Zone Employee Portal

Under Users section:

• Assign users who should be able to authenticate with Zone Employee Portal

Step 3: Configure OneLogin in Zone Employee Portal

You’ll need:

• OneLogin authorization URL:
  https://<your-onelogin-domain>.onelogin.com/oidc/2/auth

• Client ID and Client Secret (from OneLogin SSO tab)

In Zone Employee Portal:

1. Log in as an admin

2. Go to:
   Administration → Additional setup → External Authentication Provider

3. Click Create

4. Fill in the following:

   • Name: OneLogin

   • Type: ONELOGIN

   • Authorize URL: https://<your-onelogin-domain>.onelogin.com/oidc/2/auth

   • Client ID: (from OneLogin)

   • Client Secret: (from OneLogin)

5. Click Save

Once saved, you’ll see a Login URL generated.
Admins must provide this URL to users – this is the only way they can log in using OneLogin.

Important Notes

• Users must use the Login URL provided by the admin. The standard username/password login page will not work for them

• A corresponding Employee record must exist in Zone Employee Portal for login to succeed. If it doesn’t, login will fail

User Login Steps

1. Get the Login URL from your admin > Admins to distribute logins to employees

2. Navigate to that URL to log in with your OneLogin account

To locate the Login URL:

• Admins can go to:
  Administration → Additional setup → External Authentication Provider → Select your provider → Login URL