Supported Features
The Okta/Standuply SAML integration currently supports the following features:
IdP-initiated SSO
SP-initiated SSO
JIT (Just In Time) Provisioning
Configuration Steps
Sign-in to your Okta admin account
Go to the Applications page and click Create App Integration button
Choose SAML 2.0 and click the Next button
Enter the application name and upload the app logo (optional). You can use the logo under the screenshot
Enter SAML Settings and Attribute Statements as shown on the screenshot:
On the next page click the Finish button
After the app is created you need to enable SCIM provisioning in app settings so click Edit → check Enable SCIM provisioning → click Save
Go to Sign On tab and click View Setup Instructions. Here you will get your Provider Single Sign-On URL, Identity Provider Issuer, X.509 Certificate. You can leave this page open or save these credentials, it will be needed later.
Sign-in to your Standuply account at https://app.standuply.com
Go to SSO & Provisioning settings (https://app.standuply.com/settings/sso-credentials)
Enter the following:
1) Company Name
2) Provider Single Sign-On URL
3) Identity Provider Issuer
4) X.509 Certificate
Click the Update credentials button
Get your SCIM Token:
Сonfigure your SCIM connection at Okta Standuply application → Provisioning → Integration as shown on screenshot (SCIM connector base URL - https://app-api.standuply.com/scim/v2/okta), copy and paste your SCIM Token to Bearer textbox, test connection with Test Connector Configuration, and click Save button
Go to the To App tab (at the left sidebar in provisioning settings), click Edit, and check Create Users, Update User Attributes, Deactivate Users. Click Save
The setup is done. Use Okta dashboard or Standuply to log in using Okta.
SP-initiated SSO
Click SSO via OKTA button
Enter the Company name you configured earlier and click the Sign In button
Backup URL
If you are an administrator, you can use any of the provided OpenID services like Google, Microsoft, etc. (with an appropriate email address) or with a password to log into your Standuply account.
Notes
The following SAML attributes are supported:
Name | Value |
firstName | user.firstName |
lastName | user.lastName |
user.email |