How to Set Up Single Sign-On For Okta
Creating the App in Okta
Log in to your Okta account.
In the sidebar click to expand the Applications menu > click Application.
Click Create App Integration.
In the popup box, select SAML 2.0 > Next.
Note: Okta includes a preconfigured Bluescape enterprise application in their Applications list. It would help if you did not use it as it is not configured correctly for the current release.
On the Create SAML Integration screen, enter the app name and click Next.
The SAML settings screen opens. Complete the following substeps:
a. Enter the following in the Single sign-on URL field.
Note: The final part of the URL–acs_id – is only a placeholder. It updates later with the actual ID of the SAML provider after the provider is added in Bluescape.
c. Enter the following in the Audience URI (SP Entity ID) field.
Note: The final part of the URL– customer_saml_provider_name – is only a placeholder. It updates later with the actual ID of the SAML provider after the provider is added in Bluescape.
d. Leave the Default RelayState field blank.
e. Set the Name ID format field to Email Address.
f. Set the Application username field to Email.
g. Leave the Update application username on field unchanged.
Scroll down to the Attribute Statements section and enter the following four attributes to provision users on Bluescape:
Note: If you choose to use a value other than user.id, the value must be unique for each user and unchangeable, even if the user’s email changes.
(Optional) In the final section of the screen, provide feedback to Okta.
To complete this stage of the setup, click Finish.
Grabbing the Metadata URL to Provide Bluescape Support
On the Sign-On screen that opens, scroll down to the SAML Signing Certificates.
Click on Actions for the active certificate to open the actions dropdown.
Select View ldP metadata.
A new browser tab opens. Copy the URL and provide it to Bluescape Support.
The link should be similar to the following example:
Updating the App Login URL’s in Okta
Bluescape Support creates a new SAML provider and sends you its ID.
At the top of the section, click the General tab.
Scroll down to the SAML Settings field and click Edit.
On the General Settings screen that opens, click Next.
In the Single sign-on URL and Audience URI (SP Entity ID), replace the placeholder value, which is currently ID, with the ID you got from Bluescape Support in Step 16.
Single sign-on URL = ASC URL
Audience URI (SP Entity ID) = Entity ID URL
Where to Next?
Not what you were looking for? Reply below or Search the community and discover more Bluescape.