This guide explains how to set up SAML SSO with Okta and Swift Digital Suite.
⚙️ Step by Step: Setting up SSO with Okta
Log in to your Okta Account https://login.okta.com/ as an administrator
Click on Applications
-
Click on Create App Integration
Select SAML 2.0 as the Sign-in method
-
Click on Next
Input App name for your own application, e.g. Swift Digital Suite SSO Configuration in Account Settings
-
Click on Next
Log in to your Swift Digital Suite account as an administrator
Go to SSO SETUP in Account Settings within the Administration module
-
Copy the fields from the Swift Digital Suite Service Provider Details to the SAML Settings in Okta
Service Provider Entity ID = Audience URI (SP Entity ID)
Reply URL (Assertion Consumer Service URL) = Single sign-on URL
Sign On URL = Default Relay State
Set the Name ID format to Unspecified
Select the Okta username as the Application username
Select the Create and update as the Update application username
-
Click on Next
Select the This is an internal app that we have created
-
Click on Finish This will create the application.
Select Sign On
-
Click on Edit under Settings
-
Copy the Sign On URL in Suite and paste it into the Default Relay State field in the Okta
Click on Save
-
Scroll down, then click on Add expression
-
Input the Name and Expression
Name Value http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress user.profile.email http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname user.profile.firstName http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname user.profile.lastName Click on Save
-
Click on View SAML setup instructions
-
Copy the Identity Provider Single Sign-On URL in Okta and paste it into the IdP SSO Login URL field in the Suite
-
Copy the Identity Provider Issuer in Okta and paste it into the IdP Entity ID field in the Suite
-
Copy the X.509 Certificate (without -----BEGIN/END CERTIFICATE----- lines) and paste it into the IdP X.509 Certificate in the Suite
-
Input http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress as the Email Attribute Name in the Suite
Click on Save Settings
Go back to Okta and assign users
Select Assignments
-
Select Assign to People
-
Click Assign beside the name of the users you want to add
Click Done
You're done. Now test SSO using Okta.
0 Comments