Configure Okta for SSO using SAML 2.0

Create a new SAML2.0 application

1. Log in to your Okta Admin Console.
2. Navigate to Applications > Applications.
3. Click the Create App Integration.
4. Select SAML 2.0 as Sign-in method.
5. From the General Settings page, in the App name field, enter an app name for your PingFederate integration. 

Configure the SAML Settings

1. In Single sign-on URL field, enter the URL <SAML 2.0 Entity ID>/sp/ACS.saml2 Note: The SAML 2.0 Entity ID URL is obtained in the pre-requisite.
2. In the Audience URI (SP Entity ID) field, enter the SAML 2.0 Entity ID URL.

• Stage SAML 2.0 Entity ID: https://ssouatadmin.epturacloud.com:9031
• Prod SAML 2.0 Entity ID: https://sso.epturacloud.com

3. Leave all other fields as it is.
4. Click the Next button.

5. You can either provide feedback on the integration or choose to skip it.
6. Click the Finish button and your app will be created.

View Setup Instructions

1. Retrieve Metadata URL or Metadata XML file.
2. When finished, you can view the setup instructions for the app.

The application’s Sign On tab has a section with a link to your applications metadata.

• Copy the Metadata URL as you will need it to configure IdP connection on Ping Federate.
• OR, if you want to configure Ping Federate using XML file, you can download the Metadata XML file, or use the provided URL and paste it into your browser's address bar and save the document that appears in XML format.

User Assignment to the application

The final setup step you will need is to assign people to the application.

1. Click on the Assignments tab.
2. Click Assign button.
3. You can either assign to individual users or assign to groups.