SETUP GUIDE FOR OKTA AS IdP

STEP 1:

• Log into Okta and create a new SAML 2.0 application

STEP 2:

• Configure SAML by filling the general settings and then the following under configure SAML settings:

Single sign on URL	https://<path-to-joomla-site>/plugins/authentication/miniorangesaml/saml2/acs.php
Audience URI (SP Entity ID)	https://<path-to-joomla-site>/plugins/authentication/miniorangesaml/
Default RelayState	Keep this field blank
Name Id Format	persistent
Application Username	Username
Issuer	https://<path-to-joomla-site>/plugins/authentication/miniorangesaml/saml2/acs.php

NOTE: Expand Advanced Settings and select request compression as compressed.

STEP 3:

• After creating and configuring the app go to the people tab.
• Here we select the people you want to give access to login through this app

STEP 4:

• After assigning the people to your app go to Sign On tab.
• Click on view setup instructions to get the SAML Login URL (Single Sign onURL), IdP EntityID and X.509 Certificate.

STEP 5:

• In miniOrange SAML plugin, go to IDENTITY PROVIDER SETTINGS tab and enter the following details:

Single SignOn Service Url	FROM OKTA APP SETTINGS
IDP Entity ID	FROM OKTA APP SETTINGS
X.509 Certificate	FROM OKTA APP SETTINGS