Okta - SSO guide

Okta - SSO Setup

Create an App integration

Once your Admin account is ready,

1. Navigate to “Applications” from the sidebar menu

2. Select the “Create App Integration” button

   Open

   

    

3. On the select the “SAML 2.0” option

   Open

   

    

4. Choose a name for your app and select the “Next” button

    

5. Open the External Share global settings and navigate to the “SSO Configuration” tab on a separate page

6. Copy the data from External Share SSO configuration and paste it into the Okta Configure SAML step

   1. Required value “Single sign on URL“ can be found on External Share SSO configuration as “Assertion Consumer URL“

   2. Required value “Audience URI (SP Entity ID)“ can be found on External Share SSO configuration as “Issuer ID“

   3. Required value “Default RelayState“ can be found on External Share SSO configuration as “Default RelayState“

       

7. Click on the “Application username” dropdown menu and select the “Email” option

8. Scroll down to the “Attribute statements” section

9. Create 3 attributes

   1. Name: givenname - Value: user.firstName

   2. Name: surname - Value: user.lastName

   3. Name: emailaddress- Value: user.email

10. Scroll down and select the “Next button”

11. Provide your feedback and select “Finish”

SAML setup

Select the application you created and click on the “Sign on” tab, scroll down and you will see a section called “SAML Signing Certificates”, at the right side of this section there is a button called “View SAML setup instructions”.

1. Click on the “View SAML setup instructions” button

2. Copy the value from the first step “Identity Provider Single Sign-On URL” and paste it into the “Login URL” field on the External Share SSO configuration tab.

3. Copy the value from the second step “Identity Provider Issuer” and paste it into the “Identifier” field on the External Share SSO configuration tab.

4. Copy the value from the third step “X.509 Certificate” and paste it into the “Certificate” field on the External Share SSO configuration tab.

5. Save

Assign users

1. On Okta, navigate to the “Directory” tab

2. Select the “People” sub-tab

3. Add a user and assign them to the application