This guide explains how to set up SAML Single Sign-On (SSO) for Aircall using OneLogin.

Important: These instructions apply only to companies that have had SAML Single Sign-On activated by Aircall. To request activation, please contact your Account Manager. This functionality is currently available to a limited number of customers.
Note: IDP-initiated SAML sign-in is not supported. Once SAML is configured, users must log in through the Aircall Dashboard or app login page using the Sign in with SSO option.

1. Create a SAML app integration

Follow these steps to create a SAML app in OneLogin:

  1. From the OneLogin portal, select Administration.
  2. At the top of the Administration page, click Applications, then choose Add app.
  3. In the Find Applications search bar, enter saml, and select SAML Test Connector (IdP).
  4. (Optional) On the Add SAML Test Connector (IdP) page, customize your app:
    • Display Name: Enter a name and description, such as acme-saml@aircall.
    • Rectangular Icon and Square Icon: Upload icons as per the specifications on the page.
    • Description: Add a short summary, for example For Aircall.
  5. Click Save.

2. Configure SAML integration for your OneLogin app

  1. In your newly created app, go to the Configuration tab.
  2. Complete the following fields:
    • RelayState: https://dashboard.aircall.io
    • Audience: urn:amazon:cognito:sp:us-west-2_hZkGBmIsz
    • Recipient: https://sso.aircall.io/saml2/idpresponse
    • ACS (Consumer) URL Validator: https://sso.aircall.io/saml2/idpresponse
    • ACS (Consumer) URL: https://sso.aircall.io/saml2/idpresponse
    • Single Logout URL: Leave blank.
  3. Click Save.

Next, configure parameters for your app:

Note: You will already see one default parameter (NameID (fka Email)); this is expected.
  1. Click Parameters.
  2. Click Add parameter to create a new custom field.
  3. In the New Field dialog:
    • Field name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier
    • Flags: Select Include in SAML assertion.
  4. Click Save.
  5. For Value, select Email from the dropdown list.
  6. Click Save again.

3. Assign people to your OneLogin app

To enable SAML authentication for Aircall users:

  1. Click Users.
  2. Search for users or select Roles/Groups.
  3. Click Save to assign the app to individuals or groups.

4. Export the metadata

  1. Click SSO in the OneLogin app.
  2. Under Issuer URL, copy the URL to your clipboard.
  3. Use this URL as your metadata when finalizing the setup with Aircall.

For additional details about SAML, please refer to the OneLogin SAML documentation or contact our Customer Success team.