SSO Okta Onboarding

Purpose

Okta SAML 2.0 onboarding steps for SailPoint Entro.

Steps

Complete the following:

1. Request SSO support

   Request SSO support from SailPoint Entro Support.

2. Receive SP metadata

   SailPoint Entro returns SP metadata or SP values.

3. Create SAML app in Okta

   Okta Admin → Applications → Create App Integration → SAML 2.0 → Next.

4. Configure app basics

   Enter App name. Set Single sign-on URL = SP Reply URL. Set Audience URI = SP Entity ID.

5. Save and retrieve credentials

   Save and go to Sign On tab. Copy Metadata URL and X.509 cert if needed.

6. Configure Attribute Statements

   Configure Attribute Statements:

   • email to user.email

   • givenName to user.firstName

   • familyName to user.lastName

   • groups to optional

7. Assign access

   Assign users or groups via Assignments tab.

8. Provide info to SailPoint Entro

   Provide Metadata URL and cert to SailPoint Entro. Share allowed domains.

9. Test login

   Test login in incognito. Use SAML tracer for assertions.

What to Send to SailPoint Entro

• Metadata URL or XML

• X.509 PEM

• ACS URL and Entity ID

• Attribute mapping

• Test user and time