Onelogin

OneLogin is an enterprise SSO and identity management platform with capabilities covering SAML/OIDC application federation, user directory management, MFA, and SCIM-based directory synchronization. For agents managing enterprise identity operations — user provisioning, application access grants, lifecycle management — OneLogin's API provides programmatic access to the identity plane that controls employee access to enterprise applications. SCIM support enables automated provisioning pipelines between HR systems, agents, and application access.

Authentication uses client credentials (client ID and secret) for OAuth 2.0 token generation. The OAuth credential model is appropriate for server-side identity automation. Enterprise identity API credentials should be managed with the highest security standards — they control access to authentication infrastructure across all federated applications.

Documentation is organized around the use cases that drive enterprise identity automation: user lifecycle, app access management, and SCIM integration. The API reference is complete for the available operations. Teams new to enterprise SCIM provisioning should read the SCIM concepts documentation before implementing automated provisioning pipelines.

The API v2 covers users, roles, apps, groups, events, and SCIM operations. The user management API enables agents to create, update, and deprovision users; manage role and group assignments that control application access; and retrieve event logs for audit and compliance purposes. The SCIM API is particularly important for enterprise identity automation — it provides a standardized interface for directory synchronization that HR systems, IDPs, and agents can use interchangeably.

Reliability is enterprise-grade for SSO infrastructure. Identity management operations — user creation, role assignments — should be implemented with idempotency awareness, as duplicate provisioning events from HR systems are common. Agents handling SCIM sync should implement proper conflict resolution for cases where user attributes differ between the authoritative source and OneLogin's directory.