Okta identity provider

Set up single sign-on (SSO) for Cloud Management Platform (CMP) using Okta

  3 minute read  

Before you begin

Add the Okta SSO provider in CMP

  1. Log in to CMP as an administrator.
  2. Select Admin > Single Sign-On (SSO).
  3. Select Add > Okta.
  4. Complete the SAML settings form.

Create the Okta application

In Okta, make sure you are in the Admin menu (https://<instance-name>.okta.com/admin).

  1. Select the Applications tab.

    The Applications dashboard in Okta.

  2. Select Add Application > Create New App. Leave Web selected and choose SAML 2.0.

  3. In General Settings, enter the App name.

  4. Select Next to continue to Configure SAML.

Configure SAML

Enter the following values, then select Next:

In General Settings:

Field Description
App name Enter a name for this app.

In Configure SAML:

Field Description
Single sign-on URL In CMP, open your Okta SSO provider. On the Overview tab, copy the Single Sign-On URL and paste it here.
Use this for Recipient URL and Destination URL Enabled
Allow this app to request other SSO URLs Disabled
Audience URI (SP Entity ID) In CMP, open your Okta SSO provider. On the Overview tab, copy the Metadata URL / Entity ID and paste it here.
Default RelayState Identifies a specific application resource in an IdP-initiated SSO scenario. Usually blank.
Name ID format Unspecified
Application username Okta username
Update application username on Create and Update

In Attribute Statements:

Name Value
email user.email
username user.login
firstName user.firstName
lastName user.lastName

Configure feedback

  1. Select I’m an Okta customer adding an internal app.
  2. For App Type, select This is an internal app that we have created.
  3. Select Finish.

Download the IdP metadata

  1. In the new Okta application, select the Sign On tab.

  2. In the Settings area, find the SAML 2.0 box.

  3. Right-click the Identity Provider metadata link and select Save Link As to save it to your machine.

    Screenshot: right-click the Identity Provider metadata link and select Save Link As to save it to your machine

Assign user access

  1. In the new Okta application, select the Assignments tab.
  2. Select Assign > Assign to People.
  3. Search for people or select from the list, then select Assign.
  4. Select Done.

Finish SSO setup in CMP

  1. Log in to CMP as a Super Admin.
  2. Go to Admin > Single Sign-On (SSO).
  3. Select Okta.
  4. Import the XML metadata file you saved in Download the IdP metadata.
  5. Select Edit.
  6. If you did not choose one at setup, scroll to the Branded Portal dropdown and select a portal for Okta.
  7. (Optional) Enable auto-login:
    1. Go to Admin > Miscellaneous Settings.
    2. Set Automatically Login to SSO to On.
  8. Log out of CMP, then sign back in. You are redirected to Okta to log in.

If configured successfully, CMP creates a new user account.