Configure Okta for SSO

Configure SAML single sign-on with Okta.

Configure Okta for SSO

Create a SAML application in Okta. Then add its identity provider details to Lineaje.

Before you begin

Collect these values from the Lineaje SSO configuration:

• Entity ID

• Post callback URL

You need Tenant Admin access in Lineaje. You also need permission to create Okta applications.

Create an application in Okta

1. Open the Okta portal and switch to Admin mode.

2. Select Applications → Applications.

3. Select Create App Integration.

4. Select SAML 2.0, then select Next.

5. Enter an application name.

6. Select Next.

Configure SAML in Okta

1. Enter the Lineaje values in the SAML configuration:

   Audience URI (SP Entity ID) -> Lineaje Entity ID
   
   Single sign-on URL -> Lineaje post callback URL

2. Set Name ID format to EmailAddress.

3. Configure the required attribute statements. Okta includes these attributes in the SAML assertion.

1. Complete the remaining Okta prompts and select Finish.

Okta screens vary by version. The following examples show common options.

Assign users and groups

1. Open the application's Assignments tab.

2. Assign the users or groups that can access Lineaje.

Collect Okta SAML details

1. Open the application's Sign On tab.

2. Select View SAML setup instructions.

3. Copy the identity provider single sign-on URL.

4. Download the X.509 certificate.

Configure SAML in Lineaje

1. Return to the Lineaje application.

2. Open Settings → Authentication.

3. Select Edit Configuration → Single Sign-On.

4. Enter the Okta identity provider single sign-on URL in Sign-in URL.

5. Upload the X.509 certificate that you downloaded from Okta.

1. Select Enable SSO.