Setup SAML SSO for Okta

SAML configuration can be setup from Management > Integrations > Single Sign-On (SSO)

Configuring your Okta SAML Application

From the Okta dashboard > Applications > create a new application selecting Web as the platform and SAML 2.0 as sign on method

Open the SnapComms Content Manager metadata URL (generated from https://[subdomain].content.snapcomms.com/AuthServices), copy the entity ID and ACS location values into Okta's SAML Settings SP Identity ID and Single sign on URL fields respectively. Other settings can be left to default values, then click 'Next' and Finish (just leave this to 'I'm an Okta customer adding an internal app').

Note: If enabling IdP-initiated login, include a value in the 'Default Relay State' field.

Under the Sign On menu > click on the 'View Setup instructions' for SAML 2.0, copy the Identity Provider Issuer and paste in Identity Provider ID in the SnapComms Content Manager.

Copy Identity Provider Single Sign-on URL, remove the snapcommsorg120424_oktasnaprnd_1/ and add /metadata at the end. e.g. https://snapcommssnaprnd.okta.com/app/exkq9c7ivFILUFNxs356/sso/saml/metadata, and paste in the Identity Provider Metadata URL in the SnapComms Content Manager.

Download the certificate from Okta and change the file extension from .cert to .cer, and then upload this as the SSP validation certificate in the SnapComms Content Manager. 

Go back to the Application settings > Assignments, click the 'Assign' button and assign either users or groups.