Skip to content
Security and identity

Connect Onelogin to any app with two-way sync.

Two-way sync Onelogin across all your CRMs, databases, data warehouses, EDI systems, and AI tools, with custom workflows tailored to your data.

  • SOC 2 and 6 other compliance frameworks
  • POC with real engineers in minutes

Adopted by fast-scaling companies moving mission-critical data in real time

Case study
Migrated from MuleSoft
Case study
Migrated from Celigo
Migrated from Heroku Connect
Migrated from Matillion
Case study
Migrated from Fivetran
Case study
Migrated from Celigo
Object catalog

What Stacksync syncs in Onelogin.

These objects sync between Onelogin and any connected system, with field-level mapping and conflict resolution. Custom fields are picked up from the live schema where Onelogin exposes them.

Users
user accounts (email, username, custom attributes, status, roles); full CRUD via the v2 Users API - create, update, delete, set password, lock/unlock, and add or remove role assignments.
Roles
roles that bundle app access; created, updated, and deleted via the Roles API, with users, admins, and apps assigned to each role.
Apps (app instances)
connected SAML/OIDC application configs on the account; create, update, delete, and assign to users and roles - the writable app catalog.
Groups
account groups used for mapping and reporting; listed and read through the API, which has no create or update endpoint, so groups are read-only.
Mappings (mapping rules)
attribute-driven rules that assign roles and app access; full CRUD via the Mappings API, then reapplied across matching users.
Events
audit log of every authentication and admin action; read-only, filtered by since/until, and pushed live through the Event Webhook.
Authentication factors (MFA)
per-user registered MFA factors; enrolled, verified, and removed through the MFA API for lifecycle and security workflows.
Custom user fields
account-level custom attributes on the User record; read and written alongside the standard user profile fields.
API surface

How Stacksync connects to Onelogin.

The connector runs on Onelogin's native API. Stacksync manages authentication, rate limits, retries, and schema changes so your team does not maintain integration code.

Connection
OneLogin API (REST, v1 and v2 resource endpoints on <subdomain>.onelogin.com) plus the Event Webhook (Event Broadcaster) for event delivery
Authentication
OAuth 2.0 client credentials - an admin generates an API credential pair (client_id + client_secret) in the OneLogin portal and exchanges it at POST /auth/oauth2/v2/token for a bearer access token sent on every call; each credential carries a scope (Manage all, Manage users, Read users, etc.) that governs read vs write.
Change detection
Event Webhook (Event Broadcaster) posts batches of Event objects to a registered endpoint in near real time; the Events API also supports polling with since/until time filters and pagination for historical backfill.
Rate limits
Account-level limit of 5,000 API calls per hour shared across all access tokens; responses carry X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset, over-limit calls return HTTP 429, and the count resets each hour. Paid plans can request an increase.

Sync directions

  • Read Supported
  • Write Supported
  • Change data capture Not available
  • Webhooks Supported
What ships with Onelogin

Connect Onelogin for flexible, real-time data sync.

Real-time sync, workflow automation, event queues, EDI, and monitoring, for every connection.

Real-time

Two-way sync

Changes in Onelogin instantly reflect across connected systems. No stale data, no manual imports.

No-code + pro-code

Workflow automation

Trigger automated workflows whenever Onelogin data changes, update records, fire webhooks, or kick off sequences without brittle API scripts.

At scale

Event queues

Handle millions of events per minute without losing a single Onelogin record.

Observability

Monitoring

Track your Onelogin sync health, view errors, and replay failed events in one click.

Trading partners

EDI

Transform legacy EDI complexity into simple database interactions.

Use cases

What teams run on the Onelogin connector.

OneLogin (now part of One Identity) is the cloud identity and access management platform mid-market and enterprise IT teams use for single sign-on, MFA, and user lifecycle provisioning. It is owned by IT and identity/access (IAM) teams and watched by security and compliance. It holds the Users, Roles, Apps, Groups, and MFA factors that gate access to every connected SaaS app, plus an Events audit log of every login and admin action - the records most provisioning, deprovisioning, and access-governance workflows read from or write back to.

  • IT and IAM administrators
  • Security and compliance (GRC) teams
  • Identity / platform engineering
  • IT operations
  • HRIS admins

  1. Two-way sync Users between OneLogin and an HRIS or Postgres so new hires, attribute changes, and terminations provision and deprovision SSO accounts automatically.

  2. Write Users and Role assignments into OneLogin from a system of record such as Workday or BambooHR to drive downstream connected-app access.

  3. Read the OneLogin Events audit log into a warehouse or SIEM for login analytics, access reviews, and SOC 2 audit evidence.

  4. Keep Role membership aligned with application or database entitlement tables so each role's assigned users match who should hold that access.

  5. Read Users, Apps, and Groups into a database for identity, license, and app-assignment inventory across the OneLogin account.

  6. Two-way sync of Users between OneLogin and an HR system of record so new hires, role changes, and departures provision and deprovision SSO accounts and app access without manual admin work in the OneLogin console.

All Onelogin integrations

Pick the system you need to keep in sync with Onelogin. Each page covers the sync setup, field mapping, and common workflows for that pair.

CRM · 41

ERP · 37

Database · 50

Data warehouse · 28

Business productivity · 37

Accounting and finance · 17

How it works

Set up Onelogin in minutes, without APIs.

Configure and sync within minutes, no code. Whether you sync 50k or 100M+ records, Stacksync handles the queues, infra, and plumbing. Integrations are non-invasive and need zero setup on your systems.

  1. 01

    Connect your apps

    Authenticate Onelogin with its native method — OAuth, API keys, or service accounts — plus secure options like SSH tunneling, IP whitelisting, and VPC peering.

    • OAuth 2.0
    • SSH tunnel
    • VPC peering
    Onelogin connected
    OAuth 2.0
    SSH tunnel
    SSL certificate
    VPC peering
  2. 02

    Choose tables

    Pick the Onelogin objects to sync — Stacksync auto-detects the schema, including custom fields where the platform exposes them. Sync to existing tables, or let Stacksync create new ones with ideal data types.

    • Standard objects
    • Custom objects
    • Auto-schema
    objects · Onelogin
    Customers 12,480
    Sales Orders 8,213
    Invoices 5,902
    Items 1,344
  3. 03

    Map fields

    Fields map automatically even when names and types differ. Stacksync handles transformation and type casting for you, zero configuration required.

    • Auto-map
    • Type casting
    • Transforms
    Onelogin database
    Company company_name text
    Email email text
    Amount amount numeric
    Created created_at timestamp
Try interactive demo

FAQ

Onelogin connector FAQ

What can I sync with the Onelogin connector?

Onelogin's core objects — Users, Roles, Apps (app instances), Groups and custom fields — can sync with any of 302 other systems. Every integration is real-time and bidirectional, with field-level mapping and conflict resolution.

How does Stacksync connect to Onelogin?

Via OneLogin API (REST, v1 and v2 resource endpoints on <subdomain>.onelogin.com) plus the Event Webhook (Event Broadcaster) for event delivery, authenticated with OAuth 2.0 client credentials - an admin generates an API credential pair (client_id + client_secret) in the OneLogin portal and exchanges it at POST /auth/oauth2/v2/token for a bearer access token sent on every call; each credential carries a scope (Manage all, Manage users, Read users, etc.) that governs read vs write.. Changes are detected as follows — event Webhook (Event Broadcaster) posts batches of Event objects to a registered endpoint in near real time; the Events API also supports polling with since/until time filters and pagination for historical backfill.. Stacksync manages rate limits, retries, and schema changes automatically.

Is the Onelogin connector two-way?

Yes. Changes made in Onelogin propagate to the connected system and vice versa, in milliseconds. One-way flows are also supported when a direction should stay read-only.

How long does an Onelogin integration take to set up?

Most Onelogin integrations go live in minutes: authenticate Onelogin and the other system, pick objects and fields, and enable the sync. No code and no infrastructure to manage.

Is Onelogin data secure in transit?

Stacksync is SOC 2 Type II, ISO 27001, GDPR and HIPAA compliant. Onelogin data is encrypted in transit, and a zero-persistent-storage architecture means records are not retained after a sync operation.

SECURITY

Security teams trust Stacksync

As a data company, we understand the importance of keeping your data secure. Stacksync is built with security best practices to keep your data safe at every layer, and is DPF-certified for US, EU, UK and CH data transfers.

Learn more about security
SOC 2 Type II
ISO 27001
HIPAA BAA
GDPR
CCPA
DPF US-EU-UK-CH
→ SECURITY WITH BENEFITS

SSO & SCIM

Let your users access Stacksync from your centralized user management systems. Works with Okta, Azure, Google SSO and more.

Alerts

Immediately get alerted about record syncing issues over email, Slack, PagerDuty and WhatsApp. Resolve issues from a centralized dashboard with retry and revert options.

Secure connection options

Securely connects to your systems with:

OAuth 2 SSH Tunnelling SSL certificates IP Whitelisting VPN gateway VPC peering and more
Coworkers laughing in front of a laptop in a casual office setting

Your last integration took months.
Your next one takes a prompt.

Book a demo Tour the platform on your own