Skip to main content

​
Overview

Wirespeed connects to OneLogin with OAuth 2.0 client credentials so it can:
  • Sync directory users for identity correlation and remediation targeting
  • Suspend compromised users during incident response
  • Revoke a user’s active OneLogin session
  • Require users to reset their password at their next OneLogin sign-in
  • Re-enable suspended users when an incident is resolved
This integration covers directory sync and user remediation only. Event log ingestion is tracked separately.

​
Prerequisites

Before connecting OneLogin in Wirespeed, gather:
  • Your OneLogin subdomain (for example https://acme.onelogin.com)
  • An API Client ID
  • An API Client Secret

​
Create API Credentials

  1. Sign in to OneLogin as an administrator.
  2. Open Developers > API Credentials.
  3. Create a new API credential pair for Wirespeed.
  4. Choose a scope:
    • Manage users or Manage All if you want Wirespeed to remediate users
    • Read Users or Read All is sufficient for directory sync only
  5. Copy the Client ID and Client Secret. The secret may only be shown once.

​
Connect OneLogin in Wirespeed

  1. In Wirespeed, go to Integrations > Add Integration.
  2. Select OneLogin.
  3. Enter your OneLogin Subdomain, Client ID, and Client Secret.
  4. Save the integration and wait for validation to complete.

​
Permissions

To remediate users, the API credential must include Manage users or Manage All. Password-reset remediation marks the user as Awaiting password reset, which requires them to reset their password at their next OneLogin sign-in. Session revocation terminates the user’s OneLogin session, preventing access to the OneLogin portal and initiation of new SAML or OpenID Connect sign-ins.

​
Validation

When you enable the integration, Wirespeed validates the credentials by requesting a small page of users from the OneLogin Users API.