SSO: Configuring OneLogin for use with InVision V6

To configure OneLogin for use with InVision V6, there are four main steps to the process:

1. Add InVision as a new application in OneLogin.
2. Add your users to the application.
3. Download the metadata for the application.
4. Send the metadata to InVision's Support team, so we can finish the configuration.

This document walks you through that process.

Adding InVision as a new application in OneLogin

1. Sign in to OneLogin as an admin.
2. Click Apps > Add Apps.
   
3. In the search field in the upper left corner, enter "InVision" and click the "InVision App" entry which supports SAML.
   
4. Click Save to add the app to OneLogin.
   
5. Click the Configuration tab and enter your InVision subdomain in the Subdomain field.
   
   Note: You should only need to enter the subdomain of the URL for your InVision Enterprise team. For example, if your URL is https://your-team-name.invisionapp.com, then you would enter your-team-name in the Subdomain field.
   
6. Click the SSO tab and select SHA-256.
   
7. Click the Users tab and assign users who should be able to access InVision to the app.
   
8. Click Save.
9. Click the More Actions dropdown and click SAML Metadata to download the IdP metadata for OneLogin.
   

Sending metadata to InVision Support

Once you've downloaded your metadata from OneLogin, the Owner or an Admin on your InVision Enterprise organization will need to submit a request to InVision's Support team to finish the configuration. You can submit that request by going to https://support.invisionapp.com/hc/en-us/requests/new. Be sure to attach the metadata that you downloaded in the last step above.

Once you've sent us the metadata, do not delete/re-create the application in OneLogin. Doing so will change the metadata and will require that you repeat the above steps in order to get OneLogin working with InVision again.