---
title: "OneLogin SSO Integration - Cloudsmith"
description: "Connect OneLogin to Cloudsmith via SAML 2.0 and SCIM 2.0. Enforce SSO-only access, automate user provisioning, and sync team permissions across your artifact repositories."
canonical_url: "https://cloudsmith.com/product/integrations/onelogin-sso"
last_updated: "2026-05-20T18:59:34Z"
---
# OneLogin SSO Integration - Cloudsmith

## Secure artifact access with **OneLogin SSO**

Connect Cloudsmith to OneLogin via SAML to give your teams frictionless, policy-controlled access to your artifact repositories. Pair it with SCIM to automate user provisioning and de-provisioning as your organisation grows.

## How we support **OneLogin SSO**

Cloudsmith integrates with OneLogin over SAML 2.0 and SCIM 2.0, so your identity policies extend naturally to your artifact registries.

[Read our OneLogin documentation](https://docs.cloudsmith.com/authentication/single-sign-on-with-onelogin)

### SAML 2.0 SSO

Configure OneLogin as a SAML identity provider for your Cloudsmith workspace. Users authenticate once through OneLogin and gain immediate, policy-enforced access to your repositories.

### SCIM 2.0 provisioning

Cloudsmith is SCIM 2.0-compliant. Automatically provision new users, deprovision leavers, and sync profile changes from OneLogin without any manual intervention.

### SAML group sync

Map OneLogin groups to Cloudsmith teams automatically. Role assignments in your IdP are reflected in Cloudsmith on each login, keeping access consistent with your org structure.

### Enforce SSO-only access

Optionally require all workspace members to authenticate exclusively via SAML, eliminating password-based logins and ensuring every access event flows through your OneLogin policies.

### Flexible metadata configuration

Supply your OneLogin SAML Metadata XML by URL or inline. No complex setup required - paste your metadata, enable SAML in workspace settings, and your team can log in immediately.

## Frequently asked questions

### What protocols does the Cloudsmith and OneLogin integration use?

Cloudsmith integrates with OneLogin via SAML 2.0 for single sign-on and SCIM 2.0 for automated user provisioning and de-provisioning. Both are industry-standard protocols supported natively by OneLogin.

### How do I configure OneLogin as a SAML provider for Cloudsmith?

Create a SAML application in OneLogin, then supply the SAML Metadata XML - either via URL or inline - in your Cloudsmith workspace settings under Authentication. Full step-by-step guidance is in the Cloudsmith docs.

### Can I enforce SSO so users cannot log in with a password?

Yes. Once SAML is configured, you can enable SAML-only authentication in your workspace settings. All users in the workspace will then be required to authenticate via OneLogin - password-based logins are blocked.

### Does Cloudsmith support automated user provisioning from OneLogin?

Yes. Cloudsmith is SCIM 2.0-compliant and supports automated provisioning, de-provisioning, and profile updates via OneLogin. When you remove a user assignment in OneLogin, their Cloudsmith access is revoked automatically.

### Can I map OneLogin groups to Cloudsmith teams automatically?

Yes. Cloudsmith's SAML group sync lets you define mappings from OneLogin group attributes to Cloudsmith teams. The sync applies on each user login, keeping team membership consistent with your IdP.