SETUP GUIDE FOR OKTA AS IdP

STEP 1:

• Log in to your Okta admin dashboard.
• Click on Add Applications from the shortcuts list to create a new SAML 2.0 application
• Click on "Create New App"

STEP 2:

• Configure SAML by filling the general settings and then the following under configure SAML settings:

Single sign on URL	ACS (AssertionConsumerService) URL from Step1 of the plugin under Identity Provider Tab.
Audience URI (SP Entity ID)	SP-EntityID / Issuer from Step1 of the plugin under Identity Provider Tab.
Default RelayState	Keep this field blank
Name Id Format	Persistent
Application Username	Username
Issuer	SP-EntityID / Issuer from Step1 of the plugin under Identity Provider Tab.

NOTE: Click on Show Advanced Settings and select request compression as compressed.

STEP 3:

• After creating and configuring the app go to the people tab.
• Here we select the people you want to give access to login through this app

STEP 4:

• After assigning the people to your app go to Sign On tab.
• Click on view setup instructions to get the SAML Login URL (Single Sign onURL), IdP EntityID and X.509 Certificate.

STEP 5:

• In miniOrange SAML plugin, go to Service Provider tab and enter the following details:

Identity provider Name:	Okta
SAML Login URL	FROM OKTA APP SETTINGS
IdP Entity ID or Issuer	FROM OKTA APP SETTINGS
X.509 Certificate	FROM OKTA APP SETTINGS
Response Signed	Checked
Assertion Signed	UnChecked