OneLogin

OneLogin

Unclaimed verified 8 oct 2026
[  score · 45  ]

Access without friction. Security without compromise.

Pricing: Contact Us - Contact for pricing (flexible bundled and a-la-carte options) Company: OneLogin by One Identity Founded: 2009 Last verified: 2026-10-08
Visit Website
Updated

TL;DR

OneLogin is a cloud identity and access management platform for organizations that need workforce SSO, MFA, user provisioning, directory integration, and centralized application access. It is best suited to mid-market and enterprise teams seeking broad identity integrations with a relatively straightforward user experience; its main differentiator is practical coverage across SSO, authentication, provisioning, and custom connectors.

What Users Actually Pay

No user-reported pricing yet.

Our Take

OneLogin occupies a practical middle position in the IAM market, competing with larger platforms such as Okta while emphasizing ease of deployment, application access, and centralized identity administration. Reviewers commonly value its SSO portal, MFA capabilities, directory integrations, and ability to reduce password-related help-desk work.

Pros

  • + Strong SSO and application-consolidation capabilities, with reviewers praising centralized access to business applications.
  • + Straightforward end-user experience and relatively easy deployment for common workforce IAM scenarios.
  • + Broad integration support, including SAML, OIDC, SCIM, REST APIs, directory connectors, and custom connectors.
  • + Competitive perceived value compared with some larger IAM competitors.
  • + Useful MFA, provisioning, and centralized access-control features.

Cons

  • - Some reviewers report outages, authentication disruptions, or connection issues.
  • - Support responsiveness and incident communication are inconsistent in some customer accounts.
  • - Mobile and browser experiences receive criticism for bugs, repeated logins, or usability issues.
  • - Some advanced IAM and governance capabilities may be less mature or slower to arrive than at larger competitors.
  • - Application coverage and provisioning behavior can vary by connector and application type.

Agent Readiness

61/100

OneLogin is moderately strong for autonomous identity-administration agents. Its REST APIs, OAuth 2.0 authentication, SCIM support, application catalog, event webhooks, and Smart Hooks support onboarding, offboarding, role assignment, MFA administration, provisioning, and identity-event workflows. The main limitations are a fragmented mix of API generations, some portal-only configuration such as webhook setup, incomplete support for certain application provisioning settings, no clearly identified official GraphQL API, and no clearly identified native Make or n8n integration. It is a good fit for controlled enterprise IAM automation, but agents should use a developer or test environment first and account for authentication availability and connector-specific behavior.

API Surface100
Public APIRESTSAMLOIDCOAuth 2.0SCIMWebhooksFree TieropenApi
Protocol Support0
MCP (0 tools)
SDK Availability70
npm: @onelogin/sdk (official)npm: passport-onelogin-oauth (official)npm: @backstage/plugin-auth-backend-module-onelogin-provider (official)npm: @pulumi/onelogin (official)npm: @onelogin/onelogin-mcp (official)npm: onelogin (official)npm: @pipedream/onelogin (official)pypi: onelogin (official)
Integration Ecosystem50
ZapierWebhooksSCIMEvent BroadcasterSmart HooksMore than 2,500 application integrationsCustom and universal connectors
Developer Experience85
Docs: goodSandboxVersioningStatus Page

Last checked Sep 26, 2026

MCP Integrations

1 server
io.github.onelogin/onelogin-mcpio.github.onelogin/onelogin-mcp
Bring a keyofficialHigh match

Needs a self-provisionable API key

MCP server for OneLogin API - manage users, apps, roles, and authentication

Last checked Sep 13, 2026

[ features ]

Geostrategic Position

Information on which part of the world this product / vendor belongs to, i.e. the country of their headquarters primarily, but also their hosting options etc.

Headquarter Region

Find which geostrategic world region the headquarter is located in. Relevant for compliance questions (e.g., CLOUD Act) or risk of cut-off in case of conflicts. For example, some EU companies are worried about the US and would definitely not host their customer with Chinese or Russian companies.

United States
Hosting Provider

The hosting provider that is used to host this product, if any.

[  Other  ]
Hosting Locations

The available hosting locations, if you can choose

[  United States  ] [  Europe  ]

Compliance & Security

Security certifications, compliance features, and access control capabilities.

SOC 2

SOC 2 Type I or Type II certification.

Type II
ISO 27001

ISO 27001 information security certification.

[  yes  ]
GDPR Tools

Built-in tools for GDPR compliance (data export, deletion, consent).

[  yes  ]
Audit Trail

Complete audit log of all data changes.

[  yes  ]
Role-Based Access Control

Granular permissions based on user roles.

[  yes  ]
SSO Support

Single Sign-On integration support.

Both

Developer Experience

Tools and abstractions easing agent development and iteration.

Visual Builder

No-code/low-code UI for designing agent workflows.

no
OpenAI Compatibility

OpenAI API-compatible endpoints or SDKs.

no
Open Source

Available as open-source with community contributions.

no
SDK Languages

Programming languages with official SDK support.

[  Python  ] [  JavaScript/TypeScript  ] [  Other  ]
Pre-built UI Components

Ready-to-use, customizable UI elements for auth flows.

[  yes  ]
Admin Portal

Self-service admin dashboard for customers to manage users/orgs.

[  yes  ]
Framework Integrations

Supported frontend frameworks with dedicated guides/components.

Authentication Methods

Core authentication flows and options supported by the platform.

Passwordless Auth

Supports passwordless authentication via magic links, passkeys, or biometrics.

[  yes  ]
Social Providers

Supported third-party social login providers.

[  Google  ] [  Facebook  ] [  Apple  ] [  LinkedIn  ]
MFA Methods

Supported multi-factor authentication methods.

[  SMS  ] [  TOTP  ] [  WebAuthn/Passkeys  ] [  Push  ]
Bot Detection

Built-in protection against bots and automated attacks during auth.

[  yes  ]

Enterprise Integrations

Protocols and tools for integrating with enterprise identity systems.

SCIM Provisioning

Supports SCIM for automated user provisioning and deprovisioning.

[  yes  ]
Directory Sync

Supports syncing users/groups from directories like HRIS or IdPs.

[  yes  ]
Supported IdPs

Compatible identity providers for federation.

[  Okta  ] [  Entra ID/Azure AD  ] [  Google Workspace  ] [  OneLogin  ] [  Ping Identity  ]
JIT Provisioning

Just-In-Time user provisioning from SAML/OIDC assertions.

[  yes  ]

Pricing & Free Tier

Free tier limits and overall pricing structure.

Free Tier MAU Limit

Maximum Monthly Active Users allowed on the free tier.

0
Billed Metrics

Key usage metrics that incur costs.

[  MAU  ]

Reviews

0 reviews
Write a Review

No reviews yet. Be the first to review OneLogin!