Skip to main content

Okta - Single Sign-on Using SAML 2.0 Integration Guide

Updated

The first step in configuring an application to support SAML based Single Sign-On from Okta is to set up an application in Okta.

In Okta

Here is how to set up a SAML application in Okta:

  1. Click on the blue “Admin” button 1admin.png

  2. Click on the “Add Applications” shortcut

    2addapps.png

  3. Click on the green “Create New App” button

    3createnewapp.png

  4. In the dialog that opens, select the “SAML 2.0” option, then click the green “Create” button

    4SAML.png

  5. In Step 1 “General Settings”, enter “Example SAML Application” in the “App name” field, then click the green “Next” button. 

    5General.png

  6. In Step 2 “Configure SAML,” section A “SAML Settings”, create the  “Single sign on URL” https://wepowsubdomain.wepowapp.com/sso/saml/consume

    For the recipient, destination URLs use https://wepowapp.com. For "Audience URI" https://wepowapp.com.

    Select "Name ID format" and set to "EmailAddress" and "Application username" set to "Email"

    6GeneralA.png

    Select "Name ID format" and set to "EmailAddress" and "Aplication username" set to "Email"

  7. In the "Attribute Statements" section, add three attribute statements:
    1. “FirstName” set to “user.firstName”
    2. “LastName” set to “user.lastName”
    3. “Email” set to “user.email”
    4. "is_owner" set to isMemberOfGroupName("WepowOwner") ? "true" : "false"
    5. "wepow_team_1" set to "isMemberOfGroupName("Engineering") ? "Engineering" : null"
    6. "wepow_role_1" set to "isMemberOfGroupName("Engineering") ? "admin" : null"

    7Attributes.png

    Click Next to continue.

  8. In Step 3 “Feedback”, select “I’m an Okta customer adding an internal app”, and “This is an internal app that we have created,” then click Finish.

    8feedback.png

  9. The “Sign On” section of your newly created “Example SAML Application” application appears. Keep this page open in a separate tab or browser window. You will return to this page later in this guide and copy the “Identity Provider metadata” link. (To copy that link, right-click on the “Identity Provider metadata” link and select “Copy”) 9Methods.png

  10. Right-click on the“Assign Application” section and select “Open Link In New Tab” (so that you can come back to the “Sign On” section later).

    In the new tab that opens, click on the “Assign ” button

    10assign.png

  11. A dialog titled “Assign to people” will open. Type your username into the search box, select the checkbox next to your username, then click the green “Next” button 11AssignPeople.png

  12. You will be prompted to “Enter user-specific attributes”. Just click the green “Confirm Assignments” button to keep the defaults. 12People.png

You are now ready to configure SAML in your application. The information in the tab you opened in step #9 contains the information that you’ll need to configure SAML in your application.

In Wepow

  1. Enter to the Wepow App, and go to "My preferences"

    13Preferences.png

  2. From the section "Organization Settings" click on Single Sign-on

    14Single_Sign-on.png

  3. Select the option "SAML 2.0 and go back to Okta and pull the information from step #9.15Config_1.png

    If "Auto-provision" is enabled, users should be created from Okta.

     

     

    Thank you for using the Wepow Help Center! Our goal is to provide you with excellent customer service, and improve your experience when applying for a new job online!

Related articles