1. Split Help Center
  2. Securing your data
  3. Single sign-on (SSO)

Single sign-on with Okta

  • Updated

Okta is a cloud-based identity management provider that you can integrate with Split’s SAML 2.0 API, allowing you to log in to Split using your single sign-on (SSO) credentials. Learn more about configuring SAML in Split.

Create SSO App

  1. Sign in to Okta.
  2. Click Admin to go to the Admin panel.
  3. Select the Applications sidebar menu item.

applications_tab.png

  1. Click Create App Integration.

applications.png

  1. Select SAML 2.0, and then click Next.

create_new_app_integration.png

  1. For App name, enter a name for your Split app and click Next.

create_saml_integration.png

  1. Create the app with a temporary Single sign-on URL. You will get the real URL later during the Split configuration, and come back to change it. Use the following settings:
    • Set a temporary Audience URI (SP Entity ID). You will also get the real value during the Split configuration and change it later.
    • Set the Name ID format as EmailAddress.
    • Leave the rest of the options as default and click Next.

create_saml_integration_2.png

  1. Before finishing, select I'm an Okta customer adding an internal app.

create_saml_integration_3.png

  1. Click Finish.

  2. SSO parameters are now available. Click View Setup Instructions.

create_saml_integration_4.png

  1. Copy the IDP metadata.

idp_meta_data.png

Configure SAML

If you are a Split administrator, you can configure SAML in Admin Settings.

  1. Go to Admin Settings > Security > SAML.
  2. Add the IdP metadata copied from Okta.
  3. Enable/disable SAML strict mode.
  4. Enable/disable Just-in-time user provisioning.
  5. Click Save.

When you save these changes, you can view the summary of the SAML configuration parameters. You use this information when adding SAML settings in Okta.

split_saml_config_params.png

Add SAML Settings

  1. Go to the Okta Admin Panel.
  2. Select the General tab.
  3. Under SAML Settings, click Edit.

okta_saml_settings.png

  1. Click Next.
  2. Change the Single sign-on URL to the Assertion Consumer Service URL provided in Split in the configuration parameters.
    Change the Audience URI to the Audience URI provided in Split in the configuration parameters.
    Change the Default RelayState to the Default RelayState provided in Split in the configuration parameters.

okta_edit_saml_config.png

  1. Click Show Advanced Settings.
  2. Click Add Another under Other Requestable SSO URLs and set the URL to the Requestable SSO URL provided in Split in the configuration parameters. Set the Index value to 1.

okta_edit_saml_config_advanced.png

  1. Click NEXT and then FINISH.

Split is now linked with Okta.

Related articles

Comments

0 comments

Please sign in to leave a comment.