Edit Page

Setting Up a SAML Application in Okta

The first step in configuring an application to support SAML based Single Sign-On from Okta is to set up an application in Okta.

In SAML terminology, what you will be doing here is configuring Okta (your SAML Identity Provider or “SAML IdP”), with the details of your application (the new SAML Service Provider or “SAML SP”).

Here is how to set up a SAML application in Okta:

  1. If you are using the developer dashboard you will first need to switch to the Classic UI. If you see a < > Developer prompt in the top left, click it and select Classic UI to switch to the Classic UI.

  2. Log in to your Okta organization as a user with administrative privileges. If you don’t have an Okta organization, you can create a free Okta Developer Edition organization.

  3. Click on the blue “Admin” button Admin

  4. Click on the “Add Applications” shortcut Add Applications

  5. Click on the green “Create New App” button Create New App

  6. In the dialog that opens, select the “SAML 2.0” option, then click the green “Create” button Create a New Application Integration

  7. In Step 1 “General Settings”, enter “Example SAML Application” in the “App name” field, then click the green “Next” button. General Settings

  8. In Step 2 “Configure SAML,” section A “SAML Settings”, paste the URL below into the “Single sign on URL” and “Audience URI (SP Entity ID)” fields:

     http://example.com/saml/sso/example-okta-com
    

    SAML Settings

  9. In the “Attribute Statements” section, add three attribute statements:
    1. “FirstName” set to “user.firstName”
    2. “LastName” set to “user.lastName”
    3. “Email” set to “user.email”

    SAML Settings

    Click Next to continue.

  10. In Step 3 “Feedback”, select “I’m an Okta customer adding an internal app”, and “This is an internal app that we have created,” then click Finish.

    App type

  11. The “Sign On” section of your newly created “Example SAML Application” application appears. Keep this page open it a separate tab or browser window. You will return to this page later in this guide and copy the “Identity Provider metadata” link. (To copy that link, right-click on the “Identity Provider metadata” link and select “Copy”) Sign on methods

  12. Right-click on the “People” section of the “Example SAML Application” application and select “Open Link In New Tab” (so that you can come back to the “Sign On” section later).

    In the new tab that opens, click on the “Assign Application” button Assign Application

  13. A dialog titled “Assign Example SAML Application to up to 500 people” will open. Type your username into the search box, select the checkbox next to your username, then click the green “Next” button People search box

  14. You will be prompted to “Enter user-specific attributes”. Just click the green “Confirm Assignments” button to keep the defaults. Enter user attributes

You are now ready to configure SAML in your application. The information in the tab you opened in step #10 contains the information that you’ll need to configure SAML in your application.