XCreds Setup with OneLogin

1. In the administration page, select Applications -> Applications:
   
   
   
   
   
2. Search for OpenID and select the OpenID Connect application:
   
3. Under Configuration, enter the redirect URL as https://twocanoes.com/xcreds-redirect/
   
4. Under Settings, set Application Type to Native, the Token Endpoint Authentication method to POST and note the Client ID, Client Secret, and the Well-known Configuration by clicking on the “Well-known Configuration” link to copy the URL.
   
5. Add users to the application to allow usage. Click Save.
   
6. In the Profile Creator, add these settings:
   
   Client ID: from Step 4 above.
   Client secret: from Step 4 above.
   Discovery URL: from Step 4 above.
   Redirect URI: https://twocanoes.com/xcreds-redirect/
   * Note: The Redirect URI must match exactly as above.
   idpHostName: The hostname of your tenant (for example, “twocanoes.onelogin.com”
   scopes: profile openid
   shouldUseROPGForPasswordChangeChecking: true
   
   
7. A sample configuration for OneLogin:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>PayloadDisplayName</key>
			<string>XCreds</string>
			<key>PayloadIdentifier</key>
			<string>com.twocanoes.xcreds.07C53DE9-CA33-4E52-A008-F5EA5068D819</string>
			<key>PayloadOrganization</key>
			<string></string>
			<key>PayloadType</key>
			<string>com.twocanoes.xcreds</string>
			<key>PayloadUUID</key>
			<string>07C53DE9-CA33-4E52-A008-F5EA5068D819</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<key>clientID</key>
			<string>97c8c570-d210-013e-ddfd-5d901efb585c254554</string>
			<key>clientSecret</key>
			<string>REDACTED</string>
			<key>idpHostName</key>
			<string>twocanoes.onelogin.com</string>
			<key>discoveryURL</key>
			<string>https://twocanoes.onelogin.com/oidc/2/.well-known/openid-configuration</string>
			<key>redirectURI</key>
			<string>https://twocanoes.com/xcreds-redirect/</string>
			<key>scopes</key>
			<string>profile openid</string>
			<key>shouldUseROPGForPasswordChangeChecking</key>
			<true/>
		</dict>
	</array>
	<key>PayloadDisplayName</key>
	<string>OneLogin OIDC</string>
	<key>PayloadIdentifier</key>
	<string>86350731-1130-4F85-AAA8-A99BBBD55F8E</string>
	<key>PayloadOrganization</key>
	<string>Twocanoes Software, Inc</string>
	<key>PayloadScope</key>
	<string>System</string>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>86350731-1130-4F85-AAA8-A99BBBD55F8E</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>