Logging into Expensify

Setting Up your Expensify. 

Starting in the OneLogin admin dashboard portal, do the following:

1. Go to to Apps > Add Apps.
2. Search for Expensify that is a SAML 2.0 connector and select it.
   
   You may edit the Display Name if desired.
3. Ensure that SAML2.0 is selected under Connectors.
4. Click Save.
5. Select the Configuration tab.
6. Under Domain, put the full domain of your organization's Expensify account.
7. Click Save.
8. Select the Parameters tab.
9. Ensure that Credentials are Configured by admin and that the mappings are as follows:
   NameID (Subject) -> Email
   
10. Click Save.
11. Select the More Actions button.
12. Click the SAML Metadata option.
13. Open the downloaded metadata file in a text editor of your choice.
14. Copy the entirety of the certificate's contents. This will be put into your Expensify dashboard to confirm the SAML connection.

Setting Up Expensify

Before you begin configuring Expensify for SSO, you must first enable and verify Domain Control.

Once that's completed, starting at the Expensify admin page, do the following:

1. Go to Admin > Domain Control.
2. Select the verified Domain name.
3. Go to SAML.
4. Toggle SAML Login to Enabled.
5. Toggle Enabled or Disabled for Required for login.
• Enabled will force users to log in via SSO, with no password.
• Disabled will force users to log in with their Expensify password.
6. Paste the contents of your metadata file in the Identity Provider Metadata field.
   
   The SAML settings will update automatically.
7. If your company has SAML sign-in as an option, you can choose to enter your Expensify password or login through SAML.
   
8. If SAML is required for your company, you will only have one sign-in option.
   

With the configuration complete, OneLogin and Expensify should be connected through SAML!

Troubleshooting Email Mismatch

In some cases, the Expensify account admin email may not match the OneLogin admin email. This can be remedied by doing the following:

1. Go to Users > Account_Owner.
2. Select the Applications tab.
3. Select Expensify to open the Edit Login pane.

Here you may overwrite the default fields for your Expensify login and insert the correct information to match your OneLogin credentials with your Expensify credentials.