Configure Okta for sso

Enable sso in Lineaje application

Keep the EntityID and Callback URL handy

Create an application in Okta

• Go to Okta portal and switch to admin mode.

• From the left-hand side navigation pane, go to Applications -> Applications

• Click on "Create APP Integration"

• Select SAML 2.0 and click next.

• Enter the app name, say "Demo-Okta-Sample"

Configure SAML in Okta

• Fill the following values into their respective SAML configurations.

  • Audience URI (Entity ID) -> Entity ID which you have generated in Lineaje application

  • Single sign-on URL -> Post callback URL which you have generated in Lineaje application.

  • Select the Name ID Format as "EmailAddress"

• Set the Attribute Statements. These attributes will be part of SAML assertion and this is required for Lineaje auth to function.

• Click on following options and click on Finish. Depending on the version of Okta, there could be slightly different screens shown. Two variations are shown below.

Assign users or groups

• Goto Assignments tab

• Assign individual users or groups to the application.

Follow SAML setup instructions in Okta

• Go to Sign On-> View SAML setup instructions link

• Copy the identity provider single sign-on url, download the x.509 certificate

Configure the Lineaje application

• Go back to Lineaje application

• Copy the identity provider single sign-on url in "Sign-in URL"

• Upload the certificate from previous step.

• Proceed with activating Single Sign On(SSO)