This guide walks workspace administrators through configuring single sign-on (SSO) between OneLogin and Fellow using OpenID Connect (OIDC).
Requirements
A Fellow account on an Enterprise plan with SSO enabled
A Fellow workspace administrator account
A OneLogin administrator account (or coordination with your IT team)
Part 1: Enable the OneLogin Integration in Fellow
Sign in to Fellow using a workspace administrator account.
Navigate to Settings → Account Integrations and select the OneLogin card.
Click Next.
A configuration form will appear. Keep this page open — you will return to it after completing Part 2.
Part 2: Configure the Fellow Application in OneLogin
Note: You must have OneLogin administrator access to complete this section. If you do not, coordinate with your IT team.
2.1 Add the OIDC Application
Sign in to your OneLogin account and navigate to Applications at: https://<your_workspace>.onelogin.com/admin2/apps
Click Add App.
In the search field, enter OIDC and select OpenID Connect (OIDC).
Enter the basic application details and click Save.
2.2 Configure the Application
On the application detail page, navigate to the Configuration tab and set the following values:
Field | Value |
Login URL | |
Post Logout Redirect URIs | |
Redirect URIs |
2. Click Save
2.3 Assign Users
Assign users to the application using whichever method your OneLogin organization typically uses for user assignment.
2.4 Copy SSO Credentials to Fellow
Navigate to the SSO tab of the application in OneLogin.
Copy the Client ID, Client Secret, and Domain values.
Return to the Fellow configuration form from Part 1 and paste each value into its corresponding field.
Note on the Domain field: Enter only your OneLogin workspace subdomain, not the full issuer URL. For example, if your issuer URL is https://fellow-dev.onelogin.com/oidc/2, enter only fellow-dev.
4. Click Save.
Verifying the Integration
After saving, Fellow will automatically perform a test authorization with OneLogin. If the test is successful, the integration will be marked as Integration is enabled, confirming that SSO is active and available to users in your workspace.
If the test fails, verify that all configuration values, particularly the Redirect URI and SSO credentials, have been entered correctly, and repeat the steps above.