Okta Single Sign-on (SSO) using SAML¶
The Valtix Tenant can integrate with Okta for Single Sign-On (SSO) for user authentication using SAML 2.0. Valtix will use the SSO for user authentication only. User authorization is controlled from within the Valtix Tenant through user creation (invitation) and authorization (role) assignment.
Valtix Information¶
The following Valtix information is needed to configure Okta SSO:
- Valtix Connection Name:
ValtixConnectionName
- Single sign-on URL: https://valtix-prod.auth0.com/login/callback?connection=
ValtixConnectionName
- Audience URL (SP Entity ID): urn:auth0:valtix-prod:
ValtixConnectionName
Note: For ValtixConnectionName
please contact Valtix Support to obtain the proper value to use.
Okta Configuration¶
The following steps covers how to configure Okta SSO for integration with the Valtix Tenant for user authentication.
-
Create a new Application (
Create New App
) with the following settings:- Sign-in method:
SAML 2.0
- Sign-in method:
-
Under General Settings specify the following settings:
- App name:
Valtix-SSO
(any name can be specified) - App logo (optional): Valtix Logo Image
- App name:
-
Under SAML Settings specify the following settings:
- General
- Single sign-on URL: https://valtix-prod.auth0.com/login/callback?connection=
ValtixConnectionName
- Audience URL (SP Entity ID): urn:auth0:valtix-prod:
ValtixConnectionName
- Single sign-on URL: https://valtix-prod.auth0.com/login/callback?connection=
Note: All other General settings should be left as default.
-
Attribute Statements
Name Name format Value email
Unspecified user.email
firstname
Unspecified user.firstName
lastname
Unspecified user.lastName
login
Unspecified user.login
Note: All other SAML Settings should be left as default.
- General
-
Click Finish to complete the Application setup
-
Under Sign On tab, click View Setup Instructions and copy the following information to provide to Valtix
- Identity Provider Single Sign-on URL
- Identity Provider Issuer
- X.509 Certificate
-
Under Assignments tab, add
People
orGroups
to the Application
Okta Information¶
Please provide the following information to Valtix Support for Valtix to complete the integration with Okta SSO:
- Identity Provider Single Sign-on URL
- Identity Provider Issuer
- X.509 Certificate
Valtix User Creation¶
To add Users to the Valtix Tenant for user authentication via Okta SSO and user authorization via Role assignment, please see the Users Overview guide.
Valtix Portal Login¶
Login to Valtix can be accessed from the Valtix Portal dashboard. The email address associated with the user will be used as the login email address. This will redirect to Okta for authentication. Upon successful authentication, access to the Valtix Portal will be granted.