|
| 1 | +--- |
| 2 | +title:Okta (SAML) |
| 3 | +description:Setting Up Okta via SAML |
| 4 | +group:single-sign-on |
| 5 | +sub_group:saml |
| 6 | +toc:true |
| 7 | +--- |
| 8 | + |
| 9 | +##Set up SSO for Okta with SAML |
| 10 | +Below describes how to set up Okta for Single Sign-On with Codefresh using SAML. |
| 11 | +>If you do not have the SAML option, please create a support ticket enable SAML for the account. |
| 12 | +
|
| 13 | +###Create a SAML account in Codefresh |
| 14 | +Create a SAML account in Codefresh to get the required information to create an integration for Codefresh in Okta. |
| 15 | + |
| 16 | +1. Go to**Account Settings > Single Sign-On**. |
| 17 | +1. Click**Add Single Sign On**, and select**SAML**. |
| 18 | +1. Define the following: |
| 19 | +-**Display Name**: Any name you want to call the integration. |
| 20 | +-**IDP Entry**: Type in any character. |
| 21 | +-**Application Cert**: Type in any character. |
| 22 | +1. Click**Save**, and then**Edit** so you can copy the information. |
| 23 | + |
| 24 | +###Configure settings SAML for Codefresh in Okta |
| 25 | + |
| 26 | +1. Navigate to**Applications**. |
| 27 | +1. Select**Create App Integration > SAML2.0**, and click**Next**. |
| 28 | +1. General Settings: |
| 29 | +- Fill in the Name and any other settings you want |
| 30 | +- Click**Next**. |
| 31 | +1. Configure SAML: |
| 32 | +-**Single Sign On URL**: The Assertion URL / Callback URL in Codefresh |
| 33 | +-**Audience URL**:`g.codefresh.io` |
| 34 | +-**Name ID Format**:`EmailAddress` |
| 35 | +- Attribute Statements |
| 36 | +- Leave "Name Format" as Unspecified |
| 37 | +-**firstName**:`user.firstName` |
| 38 | +-**lastName**:`user.lastName` |
| 39 | +-**email**:`user.email` |
| 40 | +- Click**Next**. |
| 41 | +1. Feedback |
| 42 | +- Fill this out if showing |
| 43 | +- Finish |
| 44 | +1. Sign On Tab |
| 45 | +- Select**View SAML Setup Instructions** on the right hand side |
| 46 | +- Keep this open as we need it to complete the setup for Okta in Codefresh. |
| 47 | + |
| 48 | +###Configure SSO settings for OKta in Codefresh |
| 49 | + |
| 50 | +Complete SSO setup for Okta via SMAL in Codefresh. |
| 51 | + |
| 52 | +1.**IDP Entry**: Identity Provider Single Sign-On URL in Okta. |
| 53 | +1.**Application Certificate**: The X.509 Certificate |
| 54 | +-**Note**: you will get a warning when editing the Certificate section |
| 55 | +- Include the`-----BEGIN CERTIFICATE-----` and`-----END CERTIFICATE-----` |
| 56 | +1. Click**Save**. |
| 57 | + |
| 58 | +##Test SSO Connection |
| 59 | + |
| 60 | +Now test the SSO with a test user in a different browser or private/incognito browser to make sure it is working. |
| 61 | + |
| 62 | +1. Go to Account Settings > User & Teams. |
| 63 | +1. Locate a test user. |
| 64 | +1. On the SSO Column, select the SSO name to enable SSO for the user. |
| 65 | +1. In a different browser or private/incognito browser window use the Corporate SSO option to log in. |