Identity Provider and Service Provider configuration
This section discusses the steps required to add an external SAML Identity Provider in Okta, and then how to get the SAML metadata required for the Service Provider configuration.
Configure a SAML Identity Provider
Use one of the following existing procedures to configure the SAML Identity Provider:
The following steps assume that you’re using the Admin Console.
After you complete the SAML Identity Provider configuration, if you haven't done it already, download the SAML metadata for use when you configure the SAML Service Provider.
On the Identity Providers page in the Admin Console, locate the SAML Identity Provider that you just added and click the arrow next to the name to expand.
Download the metadata by clicking Download metadata. The metadata URL is similar to this:
If your Service Provider doesn't support uploading metadata, save the Assertion Consumer Service URL (ACS URL) and the Audience URI values to enter manually.
Note: If you used the Identity Providers API to create the SAML Identity Provider in Okta, locate and copy the
audience value within the
credentials property of the
protocol object. Then, locate and copy the
acs link relation type value within the
Follow the Service Provider's instructions on how to upload the metadata. If your Service Provider doesn't support uploading metadata, enter the ACS URL and Audience URI values manually.