Single sign-on with Okta

Okta is a cloud-based identity management provider that you can integrate with Split’s SAML 2.0 API, allowing you to log in to Split using your single sign-on (SSO) credentials. Learn more about configuring SAML in Split.

Create SSO App

1. Sign in to Okta.
2. Click Admin to go to the Admin panel.
3. Select the Applications tab.

4. Click Add Application.

5. Click Create New App.

6. Under Platform select Web and under Sign on method select SAML 2.0, and then click Create.

7. For App name, enter a name for your Split app and click Next.

8. Create the app with a temporary Single Sign On URL. You will get the real URL later during the Split configuration, and come back to change it. Use the following settings:
   • Set the Audience URI (SP Entity ID) value your own unique identifier (we use app.split.io for this example).
   • Set the Name ID format as EmailAddress.
   • Leave the rest of the options as default.

9. Before finishing, select I'm an Okta customer adding an internal app.

10. Click Finish.

11. SSO parameters are now available. Click View Setup Instructions.

12. Copy the IdP metadata.

Configure SAML

If you are a Split administrator, you can configure SAML in Admin Settings.

1. Go to Admin Settings > Security > SAML.
2. Add the IdP metadata copied from Okta.
3. Enable/disable SAML strict mode.
4. Enable/disable Just-in-time user provisioning.
5. Click Save.

When you save these changes, you can view the summary of the SAML configuration parameters. You use this information when adding SAML settings in Okta.

Add SAML Settings

1. Go to the Okta Admin Panel.
2. Select the General tab.
3. Under SAML Settings, click Edit.

4. Click Next.
5. Change the Single Sign on URL and the Audience URI to the Assertion Consumer Service URL provided in Split in the configuration parameters.

5. Click NEXT and then FINISH.

Split is now linked with Okta.