Okta is on of the leading Identity and Access Management (IAM) platforms that allows users to access multiple applications with a single set of credentials.
Okta setup: Part 1/2
User needs to create a developer account at https://developer.okta.com/
On the Okta dashboard, on left side menu click on Applications and select Applications option
Click on Create App Integration button
On Create a new app integration modal select SAML 2.0 option and click on the Next button.
On Create SAML integration modal add App name and click on Next button.
6. On SAML Settings part enter the following data:
Single sign on URL: https://app.insightful.io/api/v1/sso-public/saml/assertion
Make sure that Use this for Recipient URL and Destination URL option is checked.
Audience URI (SP Entity ID): https://app.insightful.io
Leave Default Relay State field blank until you get that from the Insightful dashboard.
7. On Attribute Statements (optional) part enter the following attributes information:
8. Click on Next button and select following options:
9. Click on the Finish button.
Assigning application to user on OKTA
In order for the user to be able to use SSO login, it is necessary to assign the application created on OKTA to the user.
This is done in the following way:
Go to Okta → Directory → People, click on the desired user and select the Assign Applications button.
Find the created application and click on the Assign button and click on the Done button.
Insightful setup: Part 1/2
Precondition: Insightful admin is logged in with the same email as on the Okta.
Go to Settings → Security and Identity page and click on the Configure SAML button
Enter Name of the integration (whatever makes sense to you)
Issuer ID, Login URL and Identity Provider Certificate can be located on Okta → Applications → Applications → Select created application → go to Sign on Tab and click on the View SAML setup instructions button.
4. Copy Identity Provider Single Sign-On URL value and paste it into Login URL field on the Insightful dashboard.
5. Copy Identity Provider Issuer value and paste it into Issuer ID on the Insightful dashboard.
6. Copy or Download X.509 Certificate value and paste/upload it into Identity Provider Certificate field and click on Next step field.
Okta setup: Part 2/2
Copy Default relay state value from Insightful SAML Configuration step and paste it into OKTA on the next path:
Okta → Applications → Applications → Select your application → General tab → SAML Settings and click on Edit button.
2. On the General Settings part click on the Next button and paste copied Default relay state value into Default relay state field.
3. Click on the Show advanced settings button on the Configure SAML part.
4. This and following step are optional depending on whether you want to use the Service Provider Certificate. In case you don't want to, go to step number six. In case you do want to, go to Insightful and enable Encryption and download the certificate.
5. Click on the Next step button.
6. After you downloaded certificate, go back to OKTA and click on the Show advanced settings button, find Assertion encryption field and change its status to Enabled.
Encryption Certificate field is now visible and click on Browse files and upload downloaded Service Provider Certificate.
7. Click on the Next button.
8. Click on the Finish button.
Insightful setup: Part 2/2
On Insightful dashboard click on the Verify SAML button and login to your Okta account.
After successful login, you will be redirected to the following page:
3. Click on the Yes, Link Account button.
4. Go to your email, copy verification code and paste it:
5. Click on the Finish button.
6. SSO Configured & Verified message is displayed on the Security and Identity page on Insightful.
How to log in to the Insightful outside of Okta?
You can use the URL below to sign into Insightful from a portal or other location outside of Okta.
Where to find it on Okta?
Go to Applications → Application
Select General tab and scroll to the App Embed link section:
3. Copy URL.
That’s it!