Multi-Factor Authentication (MFA/2FA) for Bonusly login

Last updated on October 16, 2024

2FA for Bonusly login is a way to add a secure second authentication factor to every Bonusly login. Next to providing their Bonusly login and password, users must complete an extra secondary authentication method such as Mobile Push, WebAuthn/U2F Security Key, or TOTP code.

Overview of 2FA for Bonusly login

The purpose of this document is to enable Rublon Two-Factor Authentication (2FA) for users logging in to Bonusly. In order to achieve that, you have to use Rublon Access Gateway. All required steps will be described in this document.

Supported Authentication Methods

Authentication Method	Supported	Comments
Mobile Push	✔	N/A
WebAuthn/U2F Security Key	✔	N/A
Passcode	✔	N/A
SMS Passcode	✔	N/A
SMS Link	✔	N/A
Phone Call	✔	N/A
QR Code	✔	N/A
Email Link	✔	N/A
YubiKey OTP Security Key	✔	N/A

Before you start

You need to install and configure Rublon Access Gateway itself before configuring Bonusly to work with it. Please read the Rublon Access Gateway documentation and follow the steps in the Installation and Configuration sections. Afterward, follow the Configuration section in this document.

Configuration of 2FA for Bonusly login

Follow these steps to enable Rublon 2FA in Bonusly.

Bonusly

1. Log in to Bonusly.

2. Select Integrations from the left pane and then click the SAML tile.

3. Fill in the form. Refer to the following image and table.

IdP Metadata URL	Enter the value of Entity ID from Rublon Access Gateway (Applications → Information for configuring applications with Rublon Access Gateway).
IdP Issuer (Entity ID)	Enter the value of Entity ID from Rublon Access Gateway (Applications → Information for configuring applications with Rublon Access Gateway).
Authn context	PasswordProtectedTransport
IdP SSO target URL	Enter the value of SSO URL from Rublon Access Gateway (Applications → Information for configuring applications with Rublon Access Gateway)
X.509 Cert	Download the certificate from Applications → Information for configuring applications with Rublon Access Gateway → DOWNLOAD CERTIFICATE. Open the downloaded certificate in a text editor. Copy the entire contents and paste it into the text field.

4. You can leave out other fields as they are. Click Save to save your SAML configuration.

Rublon Access Gateway

1. In Rublon Access Gateway, go to Applications → Add application.

2. Fill in the form and click SAVE to add a new application. Refer to the following image and table.

Application name	Enter a name for the application, e.g. Bonusly. The name will be displayed during Rublon 2FA.
Entity ID	bonusly
Assertion Consumer Service	Enter the value of Consumer URL from your SAML Integration in Bonusly (Integrations → SAML).
Single Logout Service	https://bonus.ly/
NameID format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
NameID attribute	mail
Send Attributes	NameID
Signature algorithm	sha-256
Validate Authn Request	Uncheck.
Sign response	Check.
Sign assertion	Check.
Certificate for signing	Select the certificate you have downloaded from Applications → Information for configuring applications with Rublon Access Gateway → DOWNLOAD CERTIFICATE.
Certificate for encryption	Select the certificate you have downloaded from Applications → Information for configuring applications with Rublon Access Gateway → DOWNLOAD CERTIFICATE.

3. Your configuration is now complete. You can log in to Bonusly with Rublon 2FA.

Test Rublon 2FA Bonusly login

1. Initiate Bonusly login. If your App ID is example, go to: https://bonus.ly/saml/example/index.

2. You will be redirected to the Rublon Access Gateway login page.

3. Provide your username and password. Click SIGN IN. A window will appear with a selection of various 2FA options from Rublon. Let’s choose Mobile Push.