How to configure SAML 2.0 for OKTA

Support Desk
  • Updated
Follow

Security Assertion Markup Language (SAML) is an easy way for your users to authenticate and access Phishing Tackle. This knowledge base article will explain how to configure SAML 2.0 in OKTA.

If you have configured White Labelling, please ensure that you use your organisation's White Labelled login page to log in. The URL used to access the platform will be used to configure SAML.

Steps to configure Single Sign-on in OKTA:

How to access your SAML 2.0 settings in Phishing Tackle

  1. Under Setup in the left-hand column, click "Organisation" and then click "Settings".
    SAML_-_Organisation_and_Settings.png

  2. Click the option "Single Sign-on (SAML2)".
    SAML_-_Organisation_Settings_Single_Sign-on_SAML2.png

OKTA General settings

  1. Login to OKTA with an admin account and visit the admin dashboard.
  2. In the OKTA menu click "Applications", then click "Applications" again.
    OKTA_Admin_Dashboard_-_Applications.png

  3. Click "Create App integration".
    OKTA_Admin_Dashboard_-_Create_App.png

  4. select the option "SAML 2.0" then click "Next".
    OKTA_Admin_Dashboard_-_Create_App_-_SAML_2.0.png

  5. Give the app a name, then click "Next".
    Create_SAML_Integration.png

How to Configure OKTA SAML Settings

  1. Open your SAML 2.0 settings in Phishing Tackle. Step 1 explains how to access these settings.
  2. Copy the "Reply URL (Assertion Consumer Service URL)" (In Phishing Tackle) to "Single sign on URL
  3. In "Set Audience URI (SP Entity ID)" in
  4. Change Name ID format from "Unspecified" to "EmailAddress".
    Create_SAML_Integration_-_SAML_Setting.png
  5. Click "Show advanced settings".
  6. Do not change the SAML Issuer ID, leave this field empty.
  7. Add an Attribute Statement.
    In "Name" enter: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress (denoting the Email Claim Type which is required for login).
    Change "Name format" to: "URI Reference".
    Change "Value" to: "user.email".
    OKTA_Admin_Dashboard_-_Attribute_Statements.png

  8. Click "Next".
  9. Your final settings should look like the image below.
    Create_SAML_Integration_-_SAML_Settings.png

 Feedback

  1. For question 1 select "I'm an Okta customer adding an internal app".
  2. For question 2 select "This is an internal app that we have created".
  3. Click "Finish".

Create_SAML_Integration_-_Feedback.png

How to Configure OKTA In Phishing Tackle

  1. In the OKTA menu click "Applications", then click "Applications" again.
    OKTA_Admin_Dashboard_-_Applications.png

  2. Click on your new application
    OKTA_-_Applications.png

  3. Select the "Sign On" tab.
    OKTA_-_Applications_-_Sign_On..png

  4. Scroll down on the "Sign On" page and click "View SAML setup instructions".
    OKTA_-_Applications_-_Sign_On._-_SAML_Setup.png

  5. In the Phishing Tackle "Single Sign-on (SAML2)" settings page in "Identifier (Entity ID)" enter "PhishingTackle".
  6. Copy the "Identity Provider Single Sign-On URL:" (In OKTA) to "Identity Provider Sign on URL
  7. Copy the "Identity Provider Issuer:" (In OKTA) to "Identifier Provider Id
  8. Copy the "X.509 Certificate:" (In OKTA) to "Identity Provider SAML Base64 Signing Certificate
  9. Click "Save".

Assign users and groups

  1. In the OKTA menu click "Applications", then click "Applications" again.
    OKTA_Admin_Dashboard_-_Applications.png

  2. Click on your new application.
    OKTA_-_Applications.png

  3. Click "Assign".
    OKTA_-_Applications_-_Assignments_-_Assign.png

  4. Select the users or groups you would like to use SAML to login.

Enable Single Sign-on (SAML2) in Phishing Tackle

Once you are happy with the users and groups permitted to use the application, enable Single Sign-on (SAML2) in Phishing Tackle.

  1. Enter a description for the SAML configuration.
  2. Click "Enabled".
  3. Click "Save".
  4. Please ensure to clear all cookies before logging back in. Your users can now access Phishing Tackle and use SAML to login.
    OKTA_-_Enable_Phishing_Tackle_Single_Sign-on__SAML2_.png

If you need any assistance with configuring SAML 2.0 for OKTA, please contact our support team by clicking here.

Related articles