Okta SSO

Follow these steps to add Okta as the SAML SSO provider for your workspace:

1. Open Buddy SSO settings in one browser tab.
2. In another tab, sign in to Okta and open the admin panel:

3. Go to Applications and click Create App Integration:

4. Select SAML 2.0:

5. Set the application name and click Next.
6. Configure the app using the data copied from Buddy SSO configuration:
   • Single sign on URL → ACS / SP Assertion Consumer Service / Single Sign-On URL from Buddy
   • Audience URI (SP Entity ID) → SP Entity ID / Audience URI from Buddy

Leave other settings at their default values.

7. Click Next.
8. On the next screen, select I'm an Okta customer adding an internal app and click Finish:

9. On the application view click View Setup Instructions:

10. Save the data required for SSO configuration in Buddy for later use: Identity Provider Single Sign-On URL, Identity Provider Issuer, and the certificate.
11. Use the Assign dropdown menu to assign users to this app according to your needs:

12. Return to Buddy SSO settings tab and provide the information you copied from Okta:

    • SSO URL / SAML Endpoint / Identity Provider Single Sign-On URL → Identity Provider Single Sign-On URL from Okta
    • Issuer → Identity Provider Issuer
    • Certificate → upload the Okta certificate you downloaded
    • Signature / Digest Method → leave at Most popular
13. Click Test configuration and enable SSO on success.
14. Sign in to your Okta account to save the SSO configuration.