Data Processing

OneLogin data processing

Zluri integrates with OneLogin to enable customers to manage users in OneLogin programmatically. This article explains how you can validate the user & license data of OneLogin presented in Zluri. 

How Zluri fetches the data:

Zluri calls the following API to fetch data from OneLogin: 

https://developers.onelogin.com/api-docs/1/users/get-users

We get State and Status from APIs.

License and Status Mapping

License Mapping:

The ‘State’ codes define whether we should assign licenses or not.

  • State = 1, we assign licenses.
  • State = 0, 2, 3, no license assigned

Status Mapping:

The ‘Status’ codes define the user status(if this is the selected primary SSO) and user-app status for one login.

  • Status = 0, we mark the user as inactive,
  • Status = 1,3,4,5,7,8, we mark the user status as Active.
  • Status = 2, we mark the user as suspended.

State and Status Definitions

State definitions from API:

  • 0: Unapproved
  • 1: Approved
  • 2: Rejected
  • 3: Unlicensed

Status definitions from API:

  • 0: Unactivated
  • 1: Active Only users assigned this status can log in to OneLogin.
  • 2: Suspended
  • 3: Locked
  • 4: Password expired
  • 5: Awaiting password reset. The user is required to reset their password
  • 7: Password Pending. The user has not yet set a password
  • 8: Security questions required. The user has not yet set their security question.

Reference: For additional information, you can refer https://developers.onelogin.com/api-docs/1/users/update-user

How to validate the data:

Validating unlicenced user count

  1. On your OneLogin administrator account, navigate to Activity > Reports to access the Standard Reports.
  2. Download the ‘Unlicenced users’ report and match the count with the ‘no license assigned’ count received from the API.

Validating active user count

  1. On your OneLogin administrator account, navigate to Users > Users to view a complete list of all users.

  1. Click Show filters, select Status > Active and match the count with the ‘Active Users’ count received from the API.