In this article, you'll learn:
Setting up SSO in Okta is a three-step process. Here's how you can enable SSO for your Okta users.
How to get system provider credentials for the usecure platform
Log into the platform and go to Settings > SSO
Toggle SSO Enabled on
Scroll down to the SAML section and copy the Assertion Consumer Service (ACS) URL and Entity ID. You’ll need these to set up the SAML app in Okta.
How to set up up SAML in Okta
Open the Okta Admin Dashboard and select Applications > Applications from the sidebar. Click Create App Integration.
Select SAML 2.0 and click Next
Enter an App name and click Next
You’ll need to paste the ACS URL and Entity ID values you copied from the platform into the Single sign on URL and Audience URL fields on this form respectively. Set Application username to Email
Now click Next and then click Finish on the next screen to complete the wizard.
This will take you to the overview page for your new app. Select the Sign On tab and scroll down and click View SAML Setup Instructions on the right-hand side.
Copy the Identity Provider Single Sign-On URL and download (or copy) the x.509 Certificate.
Next you’ll need to configure access to this app to specify who can use SAML SSO in the platform.
Okta does not offer a quick way to assign all users to a Single Sign-On application. You will need to assign users and/or groups to the application so they can use SAML SSO on the platform.
The users assigned can login via SAML SSO as follows:
Admin Console - Must have an admin user account in the platform and be assigned to Okta SSO app either directly or via a group.
End User Portal - Must have an end user account in the platform and be assigned to Okta SSO app either directly or via a group.
How to set the Identity Provider Credentials in the usecure platform
Go back to the usecure platform SSO settings page and scroll down to the SAML section.
You’ll need the identity provider details you copied/downloaded during the creation of your Okta app.
Paste the Login URL into the SAML Entry Point (Identity Provider SSO URL) field.
Drag & drop the Certificate (Base64) you downloaded into the SAML Signing Certificate (Public x509 Certificate) field. You can also copy & paste the text or manually upload the file if you wish.
Click Save to finish the SAML set up process.