How to enable Okta for SSO

Have more questions? Submit a request
πŸ€“ Who can do this? You will need to be an admin user within Atlan to configure SSO. You will also need to work with your Okta administrator to carry out the tasks below in Okta.

To integrate Okta SSO for Atlan, complete the following steps.

Choose SSO provider (in Atlan)

To choose Okta as your SSO provider, within Atlan:

  1. From the left menu on any screen, navigate to Admin.
  2. Under the Workspace heading, click SSO.
  3. Under Choose SAML provider, select Okta and then click Configure.
  4. Under Service provider metadata, copy the Single sign on URL and Audience URI (SP Entity ID).

Set up SAML app (in Okta)

To set up a SAML app, within Okta's administration console:

  1. From the menu on the left, expand Applications and then click on Applications.
  2. At the top of the table, click the Create App Integration button.
  3. In the Create a new app integration dialog, select SAML 2.0 and then click Next.
  4. Under General Settings enter:
    1. For App name, enter a name for the application, such as Atlan.
    2. Click the Next button.
  5. Under SAML Settings - General enter:
    1. For Single sign on URL enter the value you copied from Atlan above.
    2. Ensure Use this for Recipient URL and Destination URL is enabled.
    3. For Audience URI (SP Entity ID) enter the value you copied from Atlan above.
  6. Under Attribute Statements (optional) define the following mappings from Name (Name format) on the left to Value on the right:
    1. firstName (Basic) β€”> user.firstName
    2. lastName (Basic) β€”> user.lastName
    3. email (Basic) β€”> user.email
  7. At the bottom of the form, click the Next button.
  8. Under Help Okta Support understand how you configured this application select I'm an Okta customer adding an internal app and for App type enable This is an internal app that we have created.
  9. Click the Finish button.

Download Okta's metadata file (in Okta)

To download Okta's metadata file, within the Okta app's page:

  1. Open the Sign On tab.
  2. Under the SAML Signing Certificates heading, in the table, click the Actions link under the Actions column.
  3. From the drop-down, click View IdP metadata.
  4. Save the XML file, if it appears in plain text in your browser.

Assign users to the app (in Okta)

To assign users to the app, within the Okta app's page:

  1. Open the Assignments tab.
  2. At the top of the table, click the Assign button and select Assign to People.
  3. To the right of each user to whom you want to assign the application, click Assign and then Save and Go Back. Repeat this for each user to whom you want to assign the application.
  4. When finished, in the Assign Atlan to People dialog, click Done.

Upload Okta's metadata file (in Atlan)

To complete the configuration of Okta SSO, within Atlan:

  1. From the left menu on any screen, navigate to Admin.
  2. Under the Workspace heading, click SSO.
  3. Under Choose SAML provider, select Okta and then click Configure.
  4. To the right of Identity provider metadata click the Import from XML button.
  5. Select the XML file saved from Okta above.
  6. At the bottom of the screen, click Save.

Congratulations β€” you have successfully set up Okta SSO in Atlan! πŸŽ‰

πŸ’ͺ Did you know? By default, users can now log into Atlan with either Okta SSO or a local Atlan account (via email). To only allow logins via SSO, enable the Enforce SSO option in Atlan.

Related articles

Was this article helpful?
0 out of 0 found this helpful