OneLogin roles and app assignments land in the access graph

Users, roles and app assignments, with MFA enrolment and last sign-in read on every sync.

Book a demo

TYPE · SAASAUTH · OAUTHDOMAIN · ONELOGIN.COM

OneLogin connectorHOURLY SYNCCAPABILITIES

WHAT PLOY DOES

Sync users and their stateEvery OneLogin user is pulled into Ploy with the state OneLogin reports, so suspended, locked and never activated accounts stay distinguishable rather than collapsing into blocked.

READ

Read roles and app assignmentsRoles and connected SSO applications land as grantable resources, with the membership and assignments behind them reconciled against the full list on every sync.

READ

Discover the applications behind single sign-onThe SSO applications OneLogin fronts are registered in Ploy, so an app the estate reaches through the directory is inventoried with everything else.

READ

Track MFA enrolmentWhich factors each user has registered, re-read every 4 hours, and cleared in Ploy when someone unenrols.

READ

Read last sign-inThe last login on the user record, which is what tells a working account from a dormant one at review time.

READ

2.1WHAT IT UNLOCKS

Three jobs this connector does on day one

ACCOUNTS

Every OneLogin identity, matched to a person

Users arrive with the state OneLogin holds for them: active, suspended, locked or never activated. An account with no employee behind it is visible the day it appears.

ACCESS

Roles and app assignments read as entitlements

Role membership and SSO application assignments are reconciled on every sync, so the graph shows which applications a person reaches through OneLogin, not just that they have a directory account.

REVIEWS