Configuring SAML SSO for Okta

This guide walks through how to configure your account to use Okta as SAML identity provider (IdP)

Okta SAML App Setup Instructions

In Okta Applications Tab

1. Goto the Applications tab
   • Click "Add Application"
   • Click "Create New App"
2. Set Platform to "Web" and Sign on method to "SAML 2.0"
   • Click "Create"
3. Set App name to "Blueshift"
   • Click "Next"

In Okta Configure SAML tab

1. Copy the "ACS Consumer URL" from the blueshift SSO tab and set it as the value for the "Single sign on URL" in Okta
2. Copy the "Entity Id" from the blueshift SSO tab and set it as the value for "Audience URI (SP Entity ID)" in Okta
3. Set Name ID format to "EmailAddress"
4. Set Application username to "Email"
5. Click "Next"

In Okta Feedback tab

1. Choose "I'm an Okta customer adding an internal app"
2. Click "Finish"

In the Okta Sign On tab (found in the newly created app)

1. Click "View Setup Instructions"
2. Copy the "Identity Provider Single Sign-On URL" from Okta and paste it into the
   "SSO Provider URL" field in the Blueshift dashboard SSO tab
3. Copy the "X.509 Certificate"  from Okta and paste it into the "X.509 Certificate" field in the Blueshift dashboard
4. Click "Save" in the SSO tab of the Blueshift dashboard

You're now setup. Be sure to assign your user in Okta to the newly created app via the "Assignments" tab in Okta (the users email must be an exact match of your user email in Blueshift).