Set Up OneLogin SSO for JustCall
Manage my account3 min readUpdated 2026-03-12
Set Up OneLogin SSO for JustCall
OneLogin SSO allows your team to access JustCall with their OneLogin credentials, centralizing authentication and simplifying user management. SSO is available on the Business plan.
Prerequisites
- JustCall Business plan
- OneLogin admin access
- A verified email domain in JustCall
Step 1: Enable SSO in JustCall
- Go to Settings → Security → Single Sign-On in JustCall.
- Click Enable SSO and select SAML 2.0.
- Copy the ACS URL and Entity ID.
Step 2: Add JustCall as a SAML App in OneLogin
- Log into the OneLogin Admin Console.
- Go to Applications → Applications → Add App.
- Search for SAML Custom Connector (Advanced) and select it.
- Set the Display Name to JustCall. Click Save.
Step 3: Configure SAML Settings
-
In the JustCall application, go to the Configuration tab.
-
Enter:
Field Value Audience (EntityID) Paste the Entity ID from JustCall ACS (Consumer) URL Paste the ACS URL from JustCall ACS URL Validator Paste the ACS URL (escaped: replace .with\.and/with\/)SAML nameID format Email -
Click Save.
Step 4: Configure Attribute Mapping
-
Go to the Parameters tab.
-
Add the following custom parameters (click the + icon):
Field Name Value (OneLogin Field) email Email firstName First Name lastName Last Name -
For each parameter, check Include in SAML assertion.
-
Click Save.
Step 5: Copy OneLogin Identity Provider Details
- Go to the SSO tab in the JustCall application.
- Copy:
- SAML 2.0 Endpoint (HTTP) — this is your SSO URL
- Issuer URL — this is your IdP Entity ID
- Under X.509 Certificate, click View Details and copy the certificate content.
Step 6: Complete Configuration in JustCall
- Return to Settings → Security → Single Sign-On in JustCall.
- Enter:
- SSO URL: SAML 2.0 Endpoint from OneLogin
- Issuer / Entity ID: Issuer URL from OneLogin
- Certificate: Paste or upload the X.509 certificate
- Set the Default Role for new SSO users.
- Click Save Configuration.
- Click Test Connection.
Step 7: Assign Users
- In OneLogin, go to the JustCall application.
- Click the Users tab (or Access tab for role-based assignment).
- Add individual users or assign roles/groups that should access JustCall.
- Click Save.
User Login Flow
- From OneLogin: Users click the JustCall tile in their OneLogin portal.
- From JustCall: Users click Sign in with SSO, enter their email, and are redirected to OneLogin.
Troubleshooting
| Issue | Solution |
|---|---|
| "Invalid audience" error | Verify the Audience (EntityID) in OneLogin matches the Entity ID in JustCall exactly. |
| Attributes not received | Confirm each parameter has Include in SAML assertion checked. |
| Certificate validation failure | Re-copy the certificate from OneLogin. Ensure no extra whitespace. |
| User cannot access the app | Check that the user is assigned to the JustCall application in OneLogin. |
Related Articles
Was this helpful?