SAML SSO with Okta
SSO Setup Steps
Step 1: Login to your OKTA admin account and click Applications (in nav bar on the left) > Create App Integration.
Step 2: Select
SAML 2.0 then click on
Next.
Step 3: Add App name and logo (optional) and click
Next.
Step 4: Enter
Single sign on URL and
Audience URI (SP Entity ID) from the team SSO configurations in Okta and set the
Default RelayState (optional) in the Okta to the dashboard url.
Step 5: Set the
Name ID
format and
Application username to
Email.
Step 6: Add an
email attribute and set it to
user.email in
Attribute Statements.
Step 7: After clicking
Next, select
I'm an Okta customer adding an internal app and enable "
This is an internal app that we have created" as the
App type.
Step 8: After Finishing. Now click on the recently created
app’s setting >
Sign-on >
View SAML setup instructions.
Step 9: Copy
certificate,
IDP Single Sign-on URL and paste it in the
SSO configuration in sprintful and update the team settings. After this user can be configured through
SSO in Sprintful.
NOTE: Okta supports this sign out process only when initiated by a Service Provider (SP).
[OPTIONAL] SCIM Setup Steps
After setting up SSO with Sprintful, now you are ready to set up SCIM with Sprintful. This step is optional.
Step 1: Select the newly created application in Okta (with the SSO setup) and click on
General tab >
App Settings Edit. Select
SCIM and click on save.
Step 2: Click on
Provisioning tab >
SCIM Connection Edit and enter the
SCIM Base Url in the
SCIM connector base URL from the team SSO configurations in Okta.
Step 3: Add
email as
Unique identifier field for users.
Step 4: Select the
Push New Users,
Push Profile Updates from the
Supported provisioning actions, set the
Authentication Mode to
HTTP Header and enter the
API Key from the team SSO configurations to
Authorization in Okta.
Step 5: Click the
Test Connector Configuration and it will test the connectors configurations by communicating with the Sprintful application and show the success response.
Step 6: Close the success response and save the settings. Then in the
Provisioning tab under
Setting
s >
To App click
Edit Provisioning to App and enable
Create Users, Update User Attributes and
Deactivate Users. Save the settings.
Step 7: Now users can be assigned by clicking on >
Assignment tab >
Assign >
Assign to People then choose the appropriate person.
Step 8: After selecting the appropriate person, it will be created in the Sprintful application and assigned to the appropriate team.
