Configure Okta for IT Expert SAML SSO

[JLehr]

Instructions for how to Configure SAML single sign on (SSO) in IT Expert

Also see IT Expert permissions

Access to both the Admin page of Okta and Administrator access to IT Expert is required.

In Okta:

Go to the Admin page of your Okta account. 

Click Applications and then Create App Integration.

Select SAML 2.0 as the sign-in method and click Next.

In General Settings, specify the App Name for your application and click Next

In Configure SAML, enter the Basic SAML Configuration details in Okta as shown in IT Expert on the Administration > More... > SSO page.

Scroll down and click Next.

Click Finish.

In the application you just created, click Sign On and then click More details in the Settings section.

Copy the Sign on URL value in details into the SAML SSO sign-in URL field in step 1 of the SSO wizard in IT Expert.

On the Sign On page in Okta, scroll to the SAML Attributes section and click Edit.

Enter the following attributes in Profile attribute statements and Group attribute statements.

The phone attribute is optional.

Profile attribute statements

Name	Name format	Value
name	Unspecified	user.firstName + " " + user.lastName
email	Unspecified	user.email
phone	Unspecified	user.mobilePhone

Group attribute statements

Name	Name format	Value
group	Unspecified	Matches regex.*

Note: The value Matches regex: .*  ensures that all groups for a user will be sent to IT Expert.

Due to technical limitations, in some cases this could lead to errors when logging into IT Expert, for example, when a user has a large number of groups.

You can set more sophisticated filtering mechanisms if needed. 

More information about the Matches regex option

Scroll to the SAML Signing Certificates section.

You can generate and download signing certificates to upload to the SSO configuration wizard of IT Expert.

If you don’t have available and valid certificates listed, click Generate new certificate. 

On the new certificate, click Actions and then click Activate.   

Click Download certificate. 

In IT Expert, Upload the certificate you downloaded.

Go to Administration > More... > SSO step 1 of the SSO configuration wizard.

In Okta, click Assignments in your application to assign people or groups to your application.

Click Assign and then Assign to People or Assign to Groups.

Only assigned people or groups can access the application.