SAML Application in Okta
To use Okta as an identity provider in SmartIQ, configure Okta (SAML Identity Provider or “SAML IdP”) with the details of SmartIQ.
Below are the steps to set up SmartIQ as a SAML application in Okta:
-
Log in to your Okta organization as a user with administrative privileges.
-
Click the Admin button.
![admin.png 72](https://files.readme.io/5fb6321-admin.png)
- Click the Add Applications shortcut.
![application.png 173](https://files.readme.io/af613b7-application.png)
- Click the Create New App button.
![newapp.png 186](https://files.readme.io/8c9b37f-newapp.png)
In the dialog that opens, select the SAML 2.0 option, then click the Create button.
![integration.png 1222](https://files.readme.io/8fd9523-integration.png)
- In the Step 1 General Settings page, enter “SmartIQ Produce” in the “App name” field, then click the Next button. You can optionally upload a logo to show on the Okta applications screen.
![okta_setting.png 592](https://files.readme.io/3f9dbee-okta_setting.png)
- In the Step 2 Configure SAML page, section A SAML Settings:
![okta_SAML.png 645](https://files.readme.io/0bc50e5-okta_SAML.png)
yourURL> | The URL to the application homepage, i.e., Manage or Produce. |
Single sign on Url | Unique to Manage and Produce, this URL takes the form of appending /Account/SamlAuthenticate to |
Audience URI (SP Entity Id) | This is the unique value in the system which will be used in the Manage SAML configuration screen. It will be unique for Manage and unique for Produce. |
Name ID Format | Set to the entry EmailAddress |
Application Username | Set to the entry Email |
- In the “Attribute Statements” section, add three attribute statements so the values are available for User Profile Mapping in Manage:
- “FirstName” set to “user.firstName”
- “LastName” set to “user.lastName”
- “Email” set to “user.email”
![Attributes.png 1257](https://files.readme.io/54a6e0d-Attributes.png)
If you are using Group Memberships in Okta and would like those memberships passed to SmartIQ, add an assertion name in the "Group Attribute Statements" section and set the filter to "Regex" with a value of .*
In this configuration, the assertion is named oktaGroups, and the Regex is set to pass all group memberships for the logged on user.
Click Next to continue.
![GroupAttribute.png 843](https://files.readme.io/5c85d6d-GroupAttribute.png)
- In the Step 3 page, select the I’m an Okta customer adding an internal app and This is an internal app that we have created options.
Click Finish.
![HelpOkta.png 1494](https://files.readme.io/dce7073-HelpOkta.png)
- The “Sign On” section of your newly created “SmartIQ Produce” application appears. Keep this page open in a separate tab or browser window.
![Okta_SignOn.png 672](https://files.readme.io/bd6b7a6-Okta_SignOn.png)
Clicking “View Setup Instructions” reveals the details required for SmartIQ configuration.
![Okta_ConfigureSAML.png 527](https://files.readme.io/fb9e569-Okta_ConfigureSAML.png)
- Right-click the “Assignments” section of the “SmartIQ Produce” application and select “Open Link In New Tab” (so that you can come back to the “Sign On” section later).
In the new tab that opens, click on the “Assign” button and select “Assign to People”
![Assignments.png 431](https://files.readme.io/4406f96-Assignments.png)
- A dialog titled “Assign SmartIQ Produce to People” opens. Type your username into the search box and click the Assign button next to your username.
![Okta_AssignPeople.png 304](https://files.readme.io/836849f-Okta_AssignPeople.png)
- Verify the user-specific attributes, then select Save and Go Back.
- Click Done to exit the assignment wizard.
Repeat for Manage
Repeat the process for the application in SmartIQ Manage. Both applications need to be configured before you can configure Okta in SmartIQ.
Updated almost 4 years ago