Salesforce Docs Portal

Establish OneLogin with POS App

Integrate your Point of Sale (POS) app with OneLogin to validate store associate credentials. Verify secure communication with Salsesforce and streamline user management using your existing identity and access management tools. Configure your OneLogin portal and CMS settings to enable seamless authentication for both online and offline access.

Important
Important This article applies to the legacy platform. If you're on Hyperforce, configure POS app SSO through Salesforce Identity instead. See Configure Salesforce Identity for Point of Sale SSO.

Prerequisites:

  • Modern POS App Build: 7.11.5 or greater
  • Files: Store Associate Feed containing store associate IDs, names, store IDs, and roles. This will be necessary to provide the mapping between the 3rd party providers and Point of Sale's backend subsystems.

OneLogin is used to validate the credentials of a store associate. After the login information is validated, communication with Point of Sale cloud is established. For information about integrating OneLogin for CMS, see Enabling OneLogin with CMS.

OneLogin Portal Configuration

Create a OneLogin application.

  1. Go to your OneLogin's portal account.
  2. Go to Applications > Applications: Add App > OpenId Connect (OIDC).
  3. Under Configuration, set the redirect URL (for example com.yourcompany.pos.oidc://callback).
  4. Under SSO, set Application Type to "Native" and Authentication Method to "None (PKCE)".

Configure Point of Sale CMS and OneLogin Integration

Configure Point of Sale CMS to integrate with your OneLogin account.

  1. Go to Advanced > Single Sign-On Configurations.
  2. Select Create on the top right of the screen or select an existing configuration.
  3. Turn on Enable. To disable integration with OneLogin, turn it off. This advises the app to treat it as inactive.
  4. Fill out the required areas by referring to the following:
    1. Provider Name: Select "One Login".
    2. Consumer Key: Enter the consumer key of your OneLogin account, which can be found by going to {Application} > SSO > Client ID.
    3. Redirect URL: Enter the URL in your OneLogin account, which can be found by going to {Application} > Configuration > Redirect URI's.
    4. Default Scopes: Provide a scope that will determine the information you recieve about a user during the authorization process. For example, "openid email profile".
    5. Token Endpoint URL: Enter the token issuer URL. For example, "https://tokenEndpointURL.com".
  5. Save your changes. The Edit Single Sign-on configuration in Point of Sale CMS, where you enter your ONeLogin credentials.

Authentication

Whether logging into POS in online or offline mode, each user has a single store associate ID. Store associate details can be found in the CMS by going to Store Management > Associates > Search Associates > Pencil.

Depending on which mode the user is in determines the password the user provides to authenticate into the Modern POS.

Modern POS Online/Offline State Authentication
User is "online" OneLogin
User is "offline" Password stored in CMS
User is transitioning from "offline" to "online" OneLogin

Sesion Timeout

Idle session timeout can be enabled in which the user will be required to log in after a period of inactivity. This can be configured in Point of Sale CMS:

  1. Go to Apps > All >.
  2. Edit an app config.
  3. Go to Modules > Settings.
  4. Turn on Enable Session Timeout.
  5. Under Session Timeout in Seconds, specify how long the app can be idle before the user reenters their credentials.
  6. Save your changes. The Single Sign-on Session Timeout settings in Point of Sale CMS.

As the session is approaching expiration, the user is prompted with the following message notifying them their session is about to expire.An SSO session expiry warning window in the POS app.

After the session expires, the user sees this screenshot. If they cannot provide valid credentials, they are logged out and shown the login screen.The Please Login to COntinue window in the POS app that users see when their SSO session expires.

Manager Approval

When a sales associate logs into POS, specific features require manager approval. Such features include:

When a sales associate attempts to perform one of these actions they are prompted for manager approval.

The Manager Login window in the POS app.

Upon tapping "APPROVE", a manager is prompted to enter their credentials.

The onelogin screen in the POS app where managers enter their credentials before approving an associate's actions.

The manager enters their username and password. After the manager approves the action, the associate can continue.

Troubelshooting

When using iOS 14 and earlier, you can wrongfully dismiss the login modal via swiping or tapping outside the window. If this happens, restart the POS app.