Airbus.onelogin.com Instant

Review: Airbus OneLogin Portal

Simplicity & Speed of Deployment: OneLogin’s agent-based architecture for legacy apps was historically easier than Azure AD App Proxy.
European Data Sovereignty: OneLogin offers EU data centers (e.g., Frankfurt, Dublin), allowing Airbus to keep certain employee data within EU borders—critical under GDPR.
Legacy AD Bridging: At the time, OneLogin’s directory connector was more mature for complex multi-forest AD environments typical of Airbus’s acquisitions (Airbus Defence and Space, former Airbus Helicopters).
ITAR Considerations: For US defense-related programs (e.g., military derivatives of the A400M), OneLogin’s FedRAMP Moderate (now High) environment satisfied US government requirements.

: If you are a customer or supplier needing portal access (e.g., for AirbusWorld

Given the sensitivity of aerospace data (e.g., military specifications, proprietary designs), simple password authentication is insufficient. airbus.onelogin.com

5.1 User Productivity

At its core, airbus.onelogin.com acts as an Identity Access Management (IAM) portal. Airbus, employing over 130,000 people across dozens of countries, relies on a complex ecosystem of software applications—from engineering tools like CATIA to enterprise resource planning systems and HR platforms. Without a centralized login system, employees would face "password fatigue," requiring different credentials for every application. Review: Airbus OneLogin Portal

SAML 2.0 (Security Assertion Markup Language): This is the primary protocol for web-based SSO. It enables Airbus to integrate legacy on-premise applications and modern cloud services without storing passwords in each app.
OIDC (OpenID Connect): Used for modern, mobile-friendly and API-driven access (e.g., custom internal mobile apps for factory floor managers).
SCIM (System for Cross-domain Identity Management): Automates user provisioning. When HR marks a new engineer as "active" in Airbus’s core HR system, OneLogin automatically creates that user’s account across all authorized applications—revoking access instantly upon departure.