Observe by Snowflake supports OneLogin as an Identity Provider (IdP) using Security Assertion Markup Language (SAML).

Configure OneLogin

1. Log into the OneLogin portal as the admin and choose Applications > Applications > Add App.
2. In the Search field, enter saml test.
3. Choose SAML Test Connector (Advanced) and change the Display Name to Observe.
4. Add a description and click Save.
5. Verify the Display Name as Observe by Snowflake, and add the Observe by Snowflake icon by navigating to https://s3-us-west-2.amazonaws.com/observeinc.com/assets/saml-icon.png.
6. Change to the Configuration page and set the following values. Replace ${OBSERVE_CUSTOMER_ID} with your Observe by Snowflake tenant ID, and ${REGION_URL} with the appropriate URL for your deployment region. See Observe by Snowflake deployment regions.

• ACS URL Validator - enter the URL https://${OBSERVE_CUSTOMER_ID}.${REGION_URL}/auth/saml2/callback.
• ACS URL - enter the URL https://${OBSERVE_CUSTOMER_ID}.${REGION_URL}/auth/saml2/callback.
• SAML initiator - enter Service Provider.
• SAML nameID format - enter Email.
• Name ID - enter Basic Information > Primary email.
• SAML signature element - enter Response.

7. Navigate to the Parameters page and add the following parameters one at a time by clicking the +, and then Save after adding each value.

• Field Names - email, firstName, and lastName (case-sensitive!)
• Values - Email, First Name, and Last Name

8. Select the Include in SAML assertion.
9. Copy the SAML 2.0 Endpoint (HTTP) URL.

Configure Observe by Snowflake

Perform the following steps to configure Observe by Snowflake for Microsoft Entra ID SSO:

1. In the left navigation rail, hover on your user name, then select Manage account.
2. Click Customer settings.
3. Click Add SAML.

4. Paste the SAML 2.0 Endpoint (HTTP) URL into the Entry Point field.
5. On the OneLogin SSO page, click Details for the X.509 certificate. Copy the certificate details and paste them into the Cert field for Observe by Snowflake.
6. Click Add SAML Provider.