Introducing OneLogin Workflows and Universal Connector

A critical requirement of a modern technology platform is the ability to extend, customize, or integrate with other systems. As a pioneer and value leader in cloud-based identity and access management (IAM), we’re well aware that one size does not fit all. Today, OneLogin is excited to announce the general availability of:

These new features enable robust integrations and extend our automation capabilities to the next level, allowing customers to customize their automation experience to meet their unique environmental needs.

Universal Connector

The Universal Connector gives customers the ability to import user data from more HRIS systems than ever before and even synchronize with other sources of user data, such as on-prem SQL databases. The new Universal Connector also enables customers to now provision users into applications not supported out-of-the-box, directly from the OneLogin platform. In addition, the Universal Connector extends several of OneLogin’s data manipulation capabilities, such as username enumeration, and helps customers keep user data clean and unique.

OneLogin Workflows

OneLogin Workflows extends OneLogin’s current provisioning capabilities and allows for full automation during user onboarding/offboarding. Some of the common use cases for OneLogin Workflows are transfer of user data/files, time-based processes, and custom notifications, among several other automation processes.

To better understand the significance of OneLogin Workflows, it’s important to understand the difference between Onelogin Workflows and our well-known mappings engine.

For many years, OneLogin mappings have been the go-to method for automating access to applications, security policies, and user data manipulation. It’s worth noting OneLogin mappings are a very powerful automation tool within the OneLogin platform and, in many cases, will be used in addition to OneLogin Workflows capabilities.

Historically, OneLogin has been a leader in user provisioning and user management, natively supporting user provisioning to hundreds of applications and several HRIS systems including leading solutions like Workday and Ultipro. OneLogin also has a full range of user APIs that allow customers to develop custom integrations and automation.

OneLogin mappings have been and will continue to be the primary method to automate user access and security within the OneLogin platform but when CRUD (Create, Read, Update, Delete) operations are not enough for customers to meet their user onboarding/offboarding processes, customers would typically use the OneLogin APIs in order to extend capabilities. Some general problems customers have with custom API integrations include:

  • Maintenance and support of custom code
  • Server hosting & infrastructure
  • Lack of flexibility
  • Reliance on developer-type resources

For example, let’s say you want to automate user onboarding/offboarding. You would need to integrate with one or multiple user directory sources (e.g. Active Directory, LDAP, Workday, etc.) and set up user provisioning to applications like Office 365, G Suite, Salesforce, or Slack. Users would be onboarded based on the OneLogin mappings logic, and then users would be created in applications and provided the correct license set within the target applications. This works great in most cases, but specific use cases may require extended capabilities, like transferring user data to managers as an offboarding process, or sending customized emails to a certain Slack channel, notifying an admin that a specific event has occurred. Solving these problems without OneLogin Workflows would require customers to either purchase another automation solution or write and support custom code to extend capabilities. Both options added additional functionality but generally at a higher cost.

OneLogin Workflows provide a server-less, low code/no code option to solve even the most complex customer onboarding/offboarding processes. Most configurations are completed within the OneLogin Workflows UI and can be modified with just a few clicks. OneLogin Workflows also add the ability to provision users into on-prem applications that have user APIs. This capability brings the same level of automation to legacy on-prem systems, and, in many cases, can replace custom code you have written and maintained for years.

Imagine, then build

For every problem, there’s a solution. Every organization, no matter the industry or size, has a nuanced set of requirements that require achieving automation at scale, while reducing the risk of poor connectivity between systems and out-of-sync user data. OneLogin Professional services can help you build your user life cycle vision and make it a reality via OneLogin Workflows and the Universal Connector, but welcomes you to be creative and build your own unique workflows.

Want to learn more? Check out our product page or request a free demo.

About the Author

Oscar Rodriguez

Oscar Rodriguez, Director of Professional Service, has over seven years of experience supporting and deploying OneLogin customers’ IAM projects and helping secure customer’s environments.

Related Articles