Okta

1 - Browse to your Server Manager Settings on port 8800 and enable SAML:

1.1 - Select the following options:

  • Use SAML for authentication

  • No IdP metadata is available yet

  • Disable TLS/SSL certificate validation when communicating with the IdP

1.2 - Leave the remaining options as their default values

1.3 - Return to the Dashboard and click Stop, then Start when it becomes available

1.4 - When the app reports ready, return to Settings and copy the SP (local) Metadata URL

  • Ensure that you can browse to this URL before proceeding

2 - Log into your Okta admin portal and configure SAML (guide) with the following changes from the default settings:

2.1 - Single sign on URL (or ACS URL): https://dash-your-domain.com/Auth/saml2/acs/

2.2 - Audience URI (SP Entity ID): the SP (local) Metadata URL from Step 3d

2.3 - Name ID format: Unspecified

2.4 - Application username: Email prefix

2.5 - Click Next, then on Okta support, answer as follows and complete the wizard:

  • I’m an Okta customer adding an internal app

  • This is an internal app that we have created

3 - In Okta, retrieve the Identity Provider metadata of the app you just created

3.1 - Click the Applications menu and the name of the app

3.2 - Click the Sign On tab and, on that page, right-click on Identity Provider metadata URL and copy the URL

4 - In your Server Manager, go to the Settings and:

4.1 - In the SAML settings section, select Enter a URL to the IdP (remote) metadata

4.2 - In the IdP (remote) Metadata URL field, paste the Identity Provider Metadata from Step 3b

4.3 - Check Enable signed AuthnRequests

4.4 - Check Enable encryption when communicating with the IdP

4.5 - Save the settings, then return to the Dashboard and click Stop, then Start

5 - In Okta, configure the user accounts you want to have access to your Dash app manager

5.1 - Click Directory in the menu bar, then People, and add user accounts:

  • One by one with Add Person; or,

  • In bulk with Import Users from CSV

5.2 - You can create groups and assign users to them in Directory > Groups

6 - In Okta, assign users and groups access to your application

6.1 - Click Applications in the menu bar, then the app you created in Step 2

6.2 - Click the Assignments tab, then either:

  • Assign to People, and click Assign for every individual to have access; or

  • Assign to Groups if you have groups containing the user accounts that should have access to the application

Last updated