--- title: Okta SSO slug: okta-sso docTags: createdAt: 2024-08-27T17:32:01.892Z --- Steps to Obtain Metadata from Okta: **Log in to Okta Admin Console:** Go to the Okta admin panel and select the application you’re integrating. **Download Metadata:** Look for an option to download the SAML metadata XML file. This file contains all the necessary details you’ll need to fill out in your software. **Extract Information:** Open the metadata file in a text editor and locate the required fields as outlined above. Once you’ve filled out all these details in your software, you should be able to connect the application to Okta via SAML. Be sure to test the connection to verify that authentication is working correctly. Follow the below step-by-step Okta walk-through and you'll be ready in no time 🚀! ### Step 1 | Logged in to Okta - Login to okta admin setup - Login will look something like the following: - https\://**\**.okta.com/admin/apps/active ### Step 2 | Application - Go to "`Application`" navigation link listed on website's left ![](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/5C7JVeXNDZ28xWaZum1yn_okta-2.png) ### Step 3 | Select your Application - Select your application (in this case, I have chosen my application "`Clearsquare Portal`"). ![\[Step 3\] | Choose application](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/xULPZFA4z4T7aiuWkYKgk_image.png "\[Step 3]") ### Step 4 | General Tab - ![\[ Step 4 \] |General tab](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/IimVWPNC2ERXnOJPT6HZC_image.png "[Step 4]") ### Step 5 | SAML Settings - Edit - Scroll down to the "`SAML Settings`" section and click the "`Edit`" button. - The blurred-out value is your server's API endpoint. This will be exactly the same as your Admin Portal's URL. - Example: `admin-analytics.yoursubdomain.com` ![\[Step 5\] SAML Settings - Edit button](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/CKMCx7_Hk9y0Wx-ZyYnUN_image04.jpg "\[Step 5]") ### Step 6 | Edit SAML Integration - Basic setup - You will be redirected to the "`Edit SAML Integration`" section. - Enter an "`App name`". - Upload an image for the "`App logo`" if you have one. - Then click on the "`Next`" button. ![\[Step 5\] Edit SAML Integration - Basic setup](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/Ej07OarVjnF0Hfrxe-bOg_image05.jpg "\[Step 6]") ### Step 7 - Configure Single sign-on URL & Audience URI (SP Entity ID) - You will have been navigated to the "`Configure SAML`" tab. - Here we will add a `Single sign-on URL` and `URI (SP Entity ID)` - If the "`Use this for Recipient URL and Destination URL`" is not checked then make sure to select the box ✅ before continuing. ### Examples **Single sign-on URL: **`https://admin-analytics.yoursubdomain.com/api/saml` **Audience URI (SP Entity ID): **`https://admin-analytics.yoursubdomain.com` **Default RelayState: ** Value should be blank. See Step 8 image. **Name ID format: **Unspecified **Application username: **Okta username **Update application username on: **Create and update ### Step 8 | Edit Advanced Settings - At the bottom of the screen you will see the "`Show Advanced Settings`". - Click that link to set up logout capabilities. ![\[Step 8\] Edit Advanced Settings](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/Bbn16NXncZw_jhnHQMKFQ_image06.jpg "\[Step 8]") ### Step 9 | Enable Single Logout - Signature Certificate and Enable Single Logout (optional) - Upload “`Signature Certificate`” file (If required). - See *Logout setup video* 👉 [Coming Soon] - “`Enable Single Logout`” by clicking on “`Allow application to initiate Single Logout`”. - See *Logout setup video* 👉 [Coming Soon] for more details. Single Logout URL: [https://admin-analytics.yoursubdomain.com/api/logout/callback](https://admin-analytics.yoursubdomain.com/api/logout/callback) SP Issuer: [https://admin-analytics.yoursubdomain.com](https://admin-analytics.yoursubdomain.com) ![\[Step 9\] SSO setup Okta](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/RLjBl6QaYQFXPZdwQCu_J_image07.jpg "\[Step 9]") - Setting SAML Attribute Statements (optional) - This will allow for JIT provisioning of users to workspaces, groups, pages and any user-attribute-based filters based on what is provisioned in SSO. - Go to "`Edit SAML Integration`" -> "`SAML Settings`" -> "`Attribute Statements`" (optional) | **Name **(Clearsquare) | **Name format (optional)** | **Value **(Okta) | | ------------------------------------------- | ---------------------------------------- | -------------------------------------------- | | user.firstName | Unspecified | user.firstName | | user.lastName | Unspecified | user.lastName | | user.email | Unspecified | user.email | | user.username | Unspecified | user.login | | user.workspace | Unspecified | user.company_id | | user.group | Unspecified | user.role_id | ### Step 10 | Complete SAML Editing - After that scroll down and click on "`Next`" button. - You're all set here now click the "`Finish`" button. ![\[Step 10\] Complete SAML Editing](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/UCyuzI_AfyeYIpp9ZUHZU_image09.jpg "\[Step 10]") ![\[Step 10\] Complete SAML Editing](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/MmReyU7l9xXw-s4RBf8Vd_image10.jpg "\[Step 10]") ### Step 11 | SSO setup Okta - The next step places you on the "`Sign On`" tab. - Click the "`Copy`" to place the **Metadata URL** value on your clipboard. ![\[Step 11\] SSO setup Okta](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/Ia43AmwQP8Lm2Hf-Qb5be_image11.jpg "\[Step 11]") ### Step 12 | Configure & Verify SSO Settings in the Admin Portal - Go to SSO Add section of the admin portal - Example link: `https://admin-analytics.yoursubdomain.com/sso/add`         ![\[Step 12\] Configure & Verify SSO Settings in the Admin Portal](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/2CZ4iuXWejNpoL2efF0cd_12.png "\[Step 12]")