OneLogin Primer

OneLogin Primer

Welcome to Garden City Community College's Primer on OneLogin! OneLogin is a SSO (Single Sign-On) provider. This means that you can sign into many of your most used applications from one location. This is a more secure method for accessing applications, as it handles the sign-in information for you, after verifying your identity via Multi-Factor Authentication.

Getting Started

OneLogin can be accessed here: OneLogin

Once you have set up multi-factor authentication, you will be able to log into the portal which will give you access to many of your favorite apps and email.

screenshot of an example OneLogin page

From the portal, you will see a selection of "Tiles." Each one of these tiles will lead you to a commonly used app or service, and since you've already verified who you are, you will not have to sign into each one of these, OneLogin has already taken care of it for you.

This means you can't accidentally mistype a url or give your password out to potential phishing attempts. It is more convenient and more secure

Setting Up OneLogin MFA

The setup for OneLogin is simple. The first step will be to install the OneLogin Protect App. This can be found from the either the Google Play Store or Apples App Store.

Installing OneLogin Protect

  1. Access the App Store.
    1. Swipe down from the middle of the Home screen. This should bring up a search bar
    2. In the search bar, type "App"
    3. At the bottom of the screen there will be a section saying "Applications"
    4. There will be a tile called "App Store" with the following image
      Iphone App Store Icon
  2. Search for "OneLogin Protect" the icon should look like the following:
    OneLogin Protect Icon
  3. Install the application to your phone. It will require you to log in with your Apple Account to verify that you are wanting to install the application
  1. Open the Google Play Store.
    1. At the bottom of your phone there is a search bar. Type in "Play Store"
    2. Beneath the search options, you will see an icon which looks like this
      Google Play Icon when searched for on Andriod
    3. Tap on the icon and the Play Store will open
  2. Search for "OneLogin Protect." It will have an icon like the following:
    OneLogin Protect Icon

  3. Install said app to your phone.

Configuring OneLogin

NOTE: This requires that you can access your OneLogin account. If you can not access your account, email IT-Help Desk. If you can not access your email, you may call (620) 276-9673. We will give you a temporary code to allow you to log in. This code will be good for only 3 days and one login, so make sure to complete the following steps.

  1. From a computer, go to gcccks.onelogin.com
  2. Check the URL at the top of the page and insure that it is the correct URL. You will be typing in your username and password and this is a good practice any time you type in your password. Ensure that it also is encrypted by making sure there is a lock next to the URL.
    An example of where to check on a url for safety
  3. You should see a prompt for your username and password
    A Onelogin Prompt for Username
    You can type either your email or username in this field, both will work
    Email example of Billy Buster login
    Username example of Billy Buster logging into OneLogin
  4. From here you will be prompted for your password. It will be your LDAP password used for logging into your email.
  5. If you cannot current access your OneLogin account, you will need to contact IT and set up temporary passcode. These passcodes are only good for onelogin and within 3 days of being issued. If you cannot email us, you may call (620) 276-9673
    1. If you've been issued a temporary code, you will need to place it at the prompt and hit continue
      Temporary Code prompt for OneLogin example
  6. You will now be prompted if you would like to remember this computer. If this is a computer that only you have access to, it is ok to select "Remember Me" and your credentials will be saved for a week. This will expire and you will have to re-authenticate at a later time. If this is a public computer, select "Skip"
    The Remember Me screenshot for OneLogin
  7. You will be asked to accept through the "Terms and Conditions." Please read through them and hit accept to continue.
    Example of the System User notification for OneLogin
  8. From here, you may see a prompt if this is the first time you are logging in from this computer asking to install the OneLogin Extension. This is a very useful password manager that allows you to save your own logins to other commonly used sites, in essence giving them multi-factor authentication. This may be discussed at a later time, scroll to the bottom of the page and select "skip" to get to the portal
    Location of the skip link for the OneLogin Extention
  9. At the top right of your screen you should see your name. Click there and a drop down menu will come down. Select Profile from the options.
    Location for the OneLogin profile options
  10. On the left hand side, you will see an option that says "Security Factors." Select that option
    Location of the Onelogin Security Factors Option
  11. From this screen you will see currently added security factors. You will want to click the button that says "Add Factor"
    Location of the Add Factor Button
  12. There will be a popup which asks which option to add. You should select "OneLogin Protect."
    The location for OneLogin Protect Security Factor
  13. From the screen you should have a window pop up which has a yellow button that says "Activate." Click said button, and the screen should now give you a barcode to scan.
    Activate Button for OneLogin Protect
  14. Return to your phone, and open the OneLogin Protect App if it is not already opened. It may ask for permissions for push notifications, this is one time we recommend you accept as the only push notifications the app will send are login prompts. Click the "+" button at the top right.
    The add account button for iPhone
  15. If your phone asks if you would like this app to have access to your camera, you may select "Allow" or "Allow this time only." This is necessary to be able to scan the barcode, after that, you may revoke these permissions.
    The scan for onelogin protect in iPhone
  16. If you see a green checkmark you should be all set! We do recommend you test that you are receiving notifications. To do this open an incognito window (press "Ctrl+Shift+N" while using chrome or edge) and a new browser window will pop up. The reason we use an incognito window is if you are already logged in and saved in your current window you will not get prompted to login again.
    1. Go to OneLogin
    2. Enter your username and password (check the url to make sure)
    3. You should receive a notification on your phone that you are trying to log in. Select "Accept" if the information is correct.
      an example of a onelogin accept login screen
    4. From here, you should be logged in. If you are, then you have successfully set up OneLogin MFA for your account!
  1. From a computer, go to gcccks.onelogin.com
  2. Check the URL at the top of the page and insure that it is the correct URL. You will be typing in your username and password and this is a good practice any time you type in your password. Ensure that it also is encrypted by making sure there is a lock next to the URL.
    An example of where to check on a url for safety
  3. You should see a prompt for your username and password
    A Onelogin Prompt for Username
    You can type either your email or username in this field, both will work
    Email example of Billy Buster login
    Username example of Billy Buster logging into OneLogin
  4. From here you will be prompted for your password. It will be your LDAP password used for logging into your email.
  5. If you cannot current access your OneLogin account, you will need to contact IT and set up temporary passcode. These passcodes are only good for onelogin and within 3 days of being issued. If you cannot email us, you may call (620) 276-9673
    1. If you've been issued a temporary code, you will need to place it at the prompt and hit continue
      Temporary Code prompt for OneLogin example
  6. You will now be prompted if you would like to remember this computer. If this is a computer that only you have access to, it is ok to select "Remember Me" and your credentials will be saved for a week. This will expire and you will have to re-authenticate at a later time. If this is a public computer, select "Skip"
    The Remember Me screenshot for OneLogin
  7. You will be asked to accept through the "Terms and Conditions." Please read through them and hit accept to continue.
    Example of the System User notification for OneLogin
  8. From here, you may see a prompt if this is the first time you are logging in from this computer asking to install the OneLogin Extension. This is a very useful password manager that allows you to save your own logins to other commonly used sites, in essence giving them multi-factor authentication. This may be discussed at a later time, scroll to the bottom of the page and select "skip" to get to the portal
    Location of the skip link for the OneLogin Extention
  9. At the top right of your screen you should see your name. Click there and a drop down menu will come down. Select Profile from the options.
    Location for the OneLogin profile options
  10. On the left hand side, you will see an option that says "Security Factors." Select that option
    Location of the Onelogin Security Factors Option
  11. From this screen you will see currently added security factors. You will want to click the button that says "Add Factor"
    Location of the Add Factor Button
  12. There will be a popup which asks which option to add. You should select "OneLogin Protect."
    The location for OneLogin Protect Security Factor
  13. From the screen you should have a window pop up which has a yellow button that says "Activate." Click said button, and the screen should now give you a barcode to scan.
    Activate Button for OneLogin Protect
  14. Return to your phone, and open the OneLogin Protect App if it is not already opened. It may ask for permissions for push notifications, this is one time we recommend you accept as the only push notifications the app will send are login prompts. Click the "+" button at the bottom right.
    The add account button for Android
  15. If your phone asks if you would like this app to have access to your camera, you may select "Allow" or "Allow this time only." This is necessary to be able to scan the barcode, after that, you may revoke these permissions.
    The scan for onelogin protect in Android
  16. If you see a green checkmark you should be all set! We do recommend you test that you are receiving notifications. To do this open an incognito window (press "Ctrl+Shift+N" while using chrome or edge) and a new browser window will pop up. The reason we use an incognito window is if you are already logged in and saved in your current window you will not get prompted to login again.
    1. Go to OneLogin
    2. Enter your username and password (check the url to make sure)
    3. You should receive a notification on your phone that you are trying to log in. Select "Accept" if the information is correct.
      an example of a onelogin accept login screen
    4. From here, you should be logged in. If you are, then you have successfully set up OneLogin MFA for your account!

FAQ

Onelogin is a SSO (Single Sign-on) service. This service allows you to access multiple applications while only having to sign in on one location.

This also protects users from by requiring 2 Factor Authentication, meaning that even if a password is compromised, it will still require the user verify they are the ones who are trying to log in. 

By bringing application's login under one portal, it makes users less likely to become victims of homograph attacks which are fake domains made to look like legitimate ones.

Yes you can, however you will need access to your email.

If you can still access your email, simply click the "Forgot Password" at the OneLogin prompt

Location of the link to recover your password in OneLogin

From here you will be prompted to type in your email address or your username. A link will be emailed to you in order to reset your password.

Onelogin requiring a username or email in order to send the reset password link

If you can't access your email, Please fill out the form located here and you will be contacted to update your password

Sometimes this can happen. Fortunately, OneLogin includes a backup multi-factor option called a One-Time Password or OTP for short. This is a random set of digits which are tied to the clock of the phone. This numbers change on a regular interval and are synced to the account. To access this option, use the following steps:

  1. At the bottom of the notification window for the OneLogin select "Enter Code Manually":
    Location to select a manual entry of code
  2. You will see a screen prompting you to put in a code (this would be different from the code IT issued you for your first time logging in)
    example of manual entry for Onelogin
  3. On your phone, open the OneLogin app, you should see a 6-digit number and a spinning wheel to the right of it. Enter that code into your the box and hit continue.
    Onelogin One Time Password example
    You should now be logged in.