Identity Provider and Service Provider Configuration
On This Page
This section discusses the steps required to add an external SAML Identity Provider in Okta, and then how to get the SAML metadata required for the Service Provider configuration.
Use the following existing procedure to configure the SAML Identity Provider:
The following steps assume that you are using the Admin Console.
After you complete the SAML Identity Provider configuration, if you haven't done it already, download the SAML metadata for use when you configure the SAML Service Provider.
On the Identity Providers page in the Admin Console, locate the SAML Identity Provider that you just added and click the arrow next to the name to expand.
Download the metadata by clicking Download metadata. The metadata URL is similar to this:
If your Service Provider doesn't support uploading metadata, save the Assertion Consumer Service URL (ACS URL) and the Audience URI values to enter manually.
Note: If you used the Identity Providers API to create the SAML Identity Provider in Okta, locate and copy the
audiencevalue within the
credentialsproperty of the
protocolobject. Then, locate and copy the
acslink relation type value within the
Follow the Service Provider's instructions on how to upload the metadata. If your Service Provider doesn't support uploading metadata, enter the ACS URL and Audience URI values manually.