Learn how to build your app on Okta, fast. Quick Starts
Edit Page

Setting Up a SAML Application in Okta

The first step in configuring an application to support SAML based Single Sign-On from Okta is to set up an application in Okta.

In SAML terminology, what you will be doing here is configuring Okta (your SAML Identity Provider or “SAML IdP”), with the details of your application (the new SAML Service Provider or “SAML SP”).

Here is how to set up a SAML application in Okta:

If you are using the developer dashboard you will first need to switch to the Classic UI.
If you see a < > Developer prompt in the top left, click it and select Classic UI to switch to the Classic UI.

  1. Log in to your Okta organization as a user with administrative privileges. If you don’t have an Okta organization, you can create a free Okta Developer Edition organization.

  2. Click on the blue “Admin” button Admin

  3. Click on the “Add Applications” shortcut Add Applications

  4. Click on the green “Create New App” button Create New App

  5. In the dialog that opens, select the “SAML 2.0” option, then click the green “Create” button Create a New Application Integration

  6. In Step 1 “General Settings”, enter “Example SAML Application” in the “App name” field, then click the green “Next” button. General Settings

  7. In Step 2 “Configure SAML,” section A “SAML Settings”, paste the URL below into the “Single sign on URL” and “Audience URI (SP Entity ID)” fields:


    SAML Settings

  8. In the “Attribute Statements” section, add three attribute statements:
    1. “FirstName” set to “user.firstName”
    2. “LastName” set to “user.lastName”
    3. “Email” set to “user.email”

    SAML Settings

    Click Next to continue.

  9. In Step 3 “Feedback”, select “I’m an Okta customer adding an internal app”, and “This is an internal app that we have created,” then click Finish.

    App type

  10. The “Sign On” section of your newly created “Example SAML Application” application appears. Keep this page open it a separate tab or browser window. You will return to this page later in this guide and copy the “Identity Provider metadata” link. (To copy that link, right-click on the “Identity Provider metadata” link and select “Copy”) Sign on methods

  11. Right-click on the “Assignments” section of the “Example SAML Application” application and select “Open Link In New Tab” (so that you can come back to the “Sign On” section later).

    In the new tab that opens, click on the “Assign” button and select “Assign to People” Assign Application

  12. A dialog titled “Assign Example SAML Application to People” will open. Type your username into the search box, select the “Assign” button next to your username. People search box

  13. Verify the user-specific attributes, then select “Save and Go Back”. Enter user attributes

  14. Click “Done” to exit the assignment wizard.

You are now ready to configure SAML in your application. The information in the tab you opened in step #10 contains the information that you’ll need to configure SAML in your application.