Set up SAML SSO for Okta
You’ll need to set up a custom SAML app to use Okta for SSO.
In the Okta Admin console, go to Applications > Applications
Click Create App Integration
For “Sign-in method”, select “SAML 2.0”. Click Next.
Under “General Settings”, enter the following attributes:
App name: Enter "Goody"
App logo (optional): Upload the Goody icon found on the "App Icon" under Goody's "Set up SAML" page.
App visibility: Select your display preference
Click Next.
Under “SAML Settings” enter these attributes:
Single sign-on URL: Copy Goody's ACS URL
Audience URI (SP Entity ID): Copy Goody's SP Entity ID
Default RelayState: Leave blank
Name ID format: Select “EmailAddress”
Application username: Select “Email”
Update Application username on: Leave as “Create and update”
Under Attribute Statements:Add attribute
first_name
and map it touser.firstName
(Name format can be “Unspecified”)Add attribute
last_name
and map it touser.lastName
(Name format can be “Unspecified”)
Scroll to the bottom of the page and click Next.
There are optional questions from Okta. You can provide your responses, or skip to the bottom and click Finish.
You’ll be brought to the Settings page**.** On the right column under “SAML Setup”, click View SAML Setup Instructions.
Copy the values from this page to your Goody’s SAML setup page:
Copy the Identity Provider Single Sign-On URL into Goody's SSO URL field.
Copy the Identity Provider Issuer into Goody's Entity ID field.
Download the X.509 Certificate and paste it into Goody's Certificate field.
On Goody's SAML setup page, click Save and enable SAML.
Sign out of your Okta account.
Test it by signing out of your Goody account, and back in by clicking "Sign in with SSO" on the sign in page.