OneLogin SAML configuration

Set up Single Sign-On (SSO) for your organisation using OneLogin.

1. On your OneLogin Admin account, go to APPS > Add Apps.
2. Search for “saml test” and select SAML Test Connector (IdP w/ attr w/ sign response).

3. Enter “Canva” on the Display Name field. Click Save.

4. On the Configuration tab, enter the following details.
   • Audience: https://www.canva.com
   • Recipient: https://www.canva.com/login/saml
   • ACS (Consumer) URL Validator: ^https://www.canva.com/login/saml$
   • ACS (Consumer) URL: https://www.canva.com/login/saml

5. Go to the SSO tab, and copy the following details. You’ll need them to complete the setup in Canva.
   • SAML 2.0 Endpoint (HTTP)
   • Issuer URL
   • X.509 Certificate

1. Log in to your Canva account.
2. On the homepage, select your account profile to open menu.
3. Choose
   Settings.
4. From the side menu, click the
   SSO and provisioning tab.
5. Under Domain verification, enter your team’s domain.
6. Click Submit domain. You will then be provided with a DNS token.
7. Create a TXT record of the DNS token using your domain host. Help from your IT team might be needed for this step.

Learn more about adding a TXT record in our Setting up Single Sign-on (SSO) article.

1. Log in to your Canva account.
2. On the homepage, select your account profile to open menu.
3. Choose
   Settings.
4. From the side menu, click the
   SSO and provisioning tab.
5. Click Single sign-on (SSO) > Manage > Edit IdP metadata.
6. Enter your identity provider’s details in the three fields:
   1. SSO or login URL: Paste your SAML 2.0 Endpoint (HTTP).
   2. Entity ID or Issuer URL: Paste your Issuer URL.
   3. X.509 Public Certificate: Paste all of the contents from your X.509 Certificate.
7. Click Save and next.

There are two easy ways to test your SSO setup:

If you're still on the Set up SSO page, scroll to the Test your SSO connection section and click Test SSO. If you're starting from the Canva homepage instead:

1. On the homepage, select your account profile to open menu.
2. Choose
   Settings.
3. From the side menu, click the
   SSO and provisioning tab.
4. Under Single sign-on (SSO) > Manage > Test SSO.

This lets you quickly check if everything’s working without logging out.

1. Before logging out, go to the
   SSO and provisioning tab.
2. Click Single sign-on (SSO) > Manage > Configure SSO settings.
3. Set the login option to Optional for everyone.
4. Log out of your Canva account.
5. On the login page, click Continue with email, then select Log in with SSO.

If you’re taken to your team’s page after logging in, you successfully set up SSO! If you get an error, check our Troubleshooting SSO errors article for help.

Quick tip: Using both methods can give you extra peace of mind that everything’s set up right.

Choose how you want people to log in to your SSO-managed team(s).

1. From the homepage, select your account profile to open menu.
2. Choose Settings > SSO and provisioning.
3. Click Single sign-on (SSO) > Manage > Configure SSO settings.
4. Select one of the login options. Learn more about each option in Setting up login and signup controls.
5. Click Save changes.