Skip to content

Okta (SSO)

User Attribute Mapping

Map attribute names from OKTA to supported user attributes. This will sync on every user authentication.

Group Attribute Mapping

You can also add group attribute statements on the same page.

Group Mapping

Enter the name of the attribute used by OKTA for group associations. We will use it to retrieve group names that can later on be mapped to roles.

Identity Provider Information

To get the IdP details, follow these steps:

  • Click Next.

  • Click Finish.

  • On the next screen, copy the Metadata URL and paste it into the Metadata URL field.

Note

Metadata URL is a required field.

Assign Groups

To give users permission to authenticate via this SAML app, you will need to assign users or groups. Select the Assignments tab and assign users or groups:

SSO Domains

Descope will provide you the domains that are used to determine which SSO configuration to load once a user chooses to authenticate using SSO.

Testing

Once all the details have been completed, test your current SSO configuration to make sure all parts are set properly.