Identity & SSO

PurpletGo + OneLogin

Log out every session and suspend the user - blocks SSO to all federated apps.

30-day free trial - no credit card required

The OneLogin integration is in beta. Confirm results in OneLogin after using it, and contact us if anything looks wrong.

What it does

What PurpletGo does in OneLogin

Log a departing employee out of OneLogin and suspend them, blocking single sign-on to federated apps.

Logs the user out of all OneLogin sessions.
Suspends the user and clears their group assignment.
Runs when an admin or HR user revokes access for the offboarding, alongside the other systems selected for that person, and the result is recorded as revoked, failed, or needs manual action, with the reason.

OneLogin API credentials (Client ID and Client Secret) with the Manage users permission.
Your OneLogin API region: US or EU.

Enterprise

Setup

1
In the OneLogin Admin Console, go to Developers > API Credentials and create credentials with Manage users.
2
In PurpletGo, open Integrations, find OneLogin, and click Connect.
3
Enter the Client ID, Client Secret, and region, and confirm your password.

When OneLogin federates access to dozens of downstream apps, one missed suspension step can quietly leave every one of those apps reachable at once.

OneLogin FAQ

What does PurpletGo do in OneLogin?

Log a departing employee out of OneLogin and suspend them, blocking single sign-on to federated apps.

Why does revoking OneLogin access matter when someone leaves?

When OneLogin federates access to dozens of downstream apps, one missed suspension step can quietly leave every one of those apps reachable at once.

Which PurpletGo plan includes the OneLogin integration?

Enterprise.

What do I need to connect OneLogin to PurpletGo?

OneLogin API credentials (Client ID and Client Secret) with the Manage users permission. Your OneLogin API region: US or EU.

Some integrations need the Team or Enterprise plan, shown above.

30-day free trial - no credit card required