This article contains information on configuring Okta SAML 2.0 with Aware, including required customer-provided details, step-by-step setup instructions, and guidelines for completing the SSO integration.
The customer will need to provide the following information to Aware in order to complete the SSO integration.
- Identity Provider Single Sign-On URL
- X.509 Certificate
Identity Provider Single Sign-On URL and X.509 Certificate information will be generated at the end of this instruction.
- Log in into your Okta Admin Dashboard
- Go to Application > Create new App
- In the Create a New Application Integration:
-
- Platform: Web
- Sign on method: SAML 2.0
- You will now enter General Settings information for Aware app, provide the following:
-
- App name: Aware
- App logo: (optional)
- App visibility: (optional)
- Enter SAML Settings information for Aware application, provide the following:
-
- Single sign on URL: https://wiretap-prod.auth0.com/login/callback?connection=YOUR_DOMAIN_NAME
- Audience URI (SP Entity ID): urn:auth0:wiretap-prod:YOUR_DOMAIN_NAME
Note
YOUR_DOMAIN_NAME value is usually your company email domain without .com. For example, our company domain awarehq.com the value will be awarehq (e.g. https://wiretap-prod.auth0.com/login/callback?connection=awarehq AND urn:auth0:wiretap-prod:awarehq). Check with your Customer Success Manager if you are unsure about what value you should use here.
- You will also need to add the following Attribute Statement:
-
- Name: email
- Name Format: Unspecified
- Value: ${user.email}
-
- Name: firstName
- Name Format: Basic
- Value: ${user.firstName}
-
- Name: lastName
- Name Format: Basic
- Value: ${user.lastName}
-
- Name: fullName
- Name Format: Basic
- Value: String.join(" ", user.firstName, user.lastName)
- You can validate provided settings are correct by click Preview the SAML Assertion to generate the output.
- Okta will show Sign On page for the newly created Aware app. Click View Setup Instructions to complete the configuration.
- Copy Identify Provider Single Sign-On URL value and download a copy of the X.509 certificate.
- Provide this information to your Aware Customer Success Manager to complete the SSO integration for Aware.
Comments
Please sign in to leave a comment.