Skip to main content

Set up Nebula single sign-on with OneLogin

The following instructions assist the Identity Provider administrator with the setup of single sign-on (SSO) for Malwarebytes Administrators into the Malwarebytes Nebula platform using Microsoft OneLogin. Nebula supports the SAML 2.0 authentication protocol.

Get started

Note: The email address used for accessing your Nebula account must match the email address used for OneLogin.

  1. Log in to your Nebula platform with administrator credentials.
  2. Go to Configure > Single Sign-On.
  3. Log in to OneLogin with administrator credentials.
  4. Ensure your environment meets the minimum operating system and external access requirements. Refer to Malwarebytes Nebula platform Administrator Guide for details.

Add a new application in OneLogin

  1. In the OneLogin portal, click ADD APP.
    DOC-2983-1.jpg

  2. In the Find Applications search bar, enter "SAML Test Connector (IdP) w/ attr w/ sign response".
    DOC-2983-2.png
  3. Assign a name to the application. For example: Malwarebytes Nebula.DOC-2983-3.png
  4. In the Configuration tab, enter the following values taken from the Malwarebytes Nebula Single Sign-On page:
    DOC-2983-4.PNG
    • SAML Consumer URL: Copy your Assertion Consumer Service URL from the Nebula Single Sign-On page.
    • SAML Audience: Leave this field blank.
    • SAML Recipient: Leave this field blank.
    • SAML Single Logout URL: Leave this field blank.
    • ACS URL Validator: Copy your Assertion Consumer Service URL from the Nebula Single Sign-On page.
  5. Click the Parameters tab > Add parameter.
    DOC-2983-5.png
  6. Fill or check the following values:
    • Name: email
      Note: "email" must be entered in lowercase. 
    • Value: Email
    • Flags: Check Include in SAML assertion
      DOC-2983-6.png
  7. Click SAVE.
  8. On the Parameters tab, click SAVE to save the application configuration.
    DOC-2983-7.png
  9. Click MORE ACTIONS > SAML Metadata to download the OneLogin metadata XML file.
    DOC-2983-8.png
  10. Return to the Nebula > Configure > Single Sign-On page.
  11. Perform one of the following:
    • Drag the OneLogin metadata XML file to the Upload New Metadata XML square.
      or
    • Click Choose a Different File to locate the metadata XML file path.
  12. Click Apply.
  13. Toggle Enable Sign Sign-On (SSO) to On and click SAVE.

Related articles