How to Set Up a OneLogin Passport for Authenticated Dashboards
This article explains how to create a OneLogin passport in Comeen Play, so your displays can sign in automatically and broadcast dashboards protected by OneLogin.
Prerequisites
Access to your Comeen Play account (login.new.play.comeen.com) with permission to manage integrations.
Your OneLogin tenant URL (for example,
https://acme.onelogin.com/). Once signed in, it must redirect to your OneLogin dashboard.(Optional) If the account uses a second factor: the OTP secret from the authenticator app matching your sign-in method (see step 2).
Important: Each sign-in method supports one authenticator app only: Google Authenticator for OneLogin native and Google, Microsoft Authenticator for Microsoft. OneLogin Protect (push or built-in code), SMS, phone calls and security keys cannot be used.
Steps
1. Identify your sign-in method
Open one of your dashboards in a private browser window and watch what happens after you enter your email on the OneLogin page:
OneLogin native: you enter your password directly on the OneLogin page.
Google: OneLogin redirects you to a Google sign-in page.
Microsoft: OneLogin redirects you to a Microsoft sign-in page.
A passport covers one sign-in method. If some dashboards go through Google and others through Microsoft, create one passport for each.
2. Get your OTP secret (optional)
Skip this step if the account does not use a second factor.
On the dedicated account, add the authenticator app matching your sign-in method:
OneLogin native: Google Authenticator, added in OneLogin. If it is not available, ask your OneLogin administrator to enable it.
Google: Google Authenticator, added in the Google account.
Microsoft: Microsoft Authenticator, added in the Microsoft account.
When the QR code appears, display the secret key.
Copy the secret key and keep it for step 3.
Finish the setup by scanning the QR code with the authenticator app matching your sign-in method.
3. Create the OneLogin passport
In Comeen Play, go to Integrations > Passports.
Select Add a passport, then choose OneLogin.
If OneLogin is not in the list, contact our team so that we can enable it for your space.
Enter a Passport title.
Enter your OneLogin tenant URL, for example
https://acme.onelogin.com/.Select the Sign-in method identified in step 1: OneLogin native, Google or Microsoft.
Enter the Username and password of the dedicated account.
(Optional) Enter the OTP secret. Leave it empty if OneLogin does not ask for a second factor.
(Optional) Under Advanced settings, click "Show" to set:
Default SSO entry: the sign-in page your dashboards show before reaching OneLogin (see step 4).
Post-login URL prefixes: only if your tenant has a custom landing page. Click "Add a prefix".
(Optional) Under Authorizations, select Add to choose who can access this passport.
Select Save Passport.
For the Google and Microsoft methods, enter the Google or Microsoft credentials and OTP secret, as described in our Google and Microsoft passport articles.
4. Set the dashboard sign-in entry
Some dashboards send users to Google or Microsoft before reaching OneLogin, for example a Looker Studio report when your Google Workspace is connected to OneLogin. In that case, tell Comeen Play which page the dashboard shows first.
Open the dashboard that uses your OneLogin passport.
In External sign-in entry, select one of the following:
None (direct sign-in): the dashboard goes straight to OneLogin.
Google: the dashboard shows a Google sign-in page first (for example, Looker Studio).
Microsoft: the dashboard shows a Microsoft sign-in page first.
Select Save.
💡 Tip: if most of your dashboards go through the same page, set the Default SSO entry on the passport (step 3). Each new dashboard starts from it, and you can still change it per dashboard. For more details, see Choose the sign-in entry of a dashboard.
5. Broadcast your dashboard
Create or open your authenticated dashboard content.
Select your OneLogin passport.
Add the content to a playlist and assign it to your displays.
Check that the dashboard displays correctly on screen.