SSO: Okta SAML Integration set-up

This section will help you create a SAML integration and get a metadata.xml file from your SSO Identity Provider Okta.

Configure the SAML integration

1

On your Okta account, go to the admin settings http://{your-workspace}-admin.okta.com

2

On the left panel, click on Applications > Applications > Create App Integration

3

Create a new application integration by selecting SAML2.0, then go Next

Complete each step as follows:

1. General Settings

App name	AB Tasty
App logo (optional)	https://www.abtasty.com/wp-content/uploads/2024/03/ABTasty_Marque_Blue_150.png

1. Configure SAML

Single Sign on (url)	Retrievable from your AB Tasty SSO configuration module on AB Tasty as ACS URL
Audience URI (SP Entity ID):	Retrievable from your AB Tasty SSO configuration module on AB Tasty as Entity ID
Default Relay State (optionnal)	should be left empty

Name ID format	EmailAddress
Application user name	Email
Attribute Statements (optional)	Name: mail Value: user.email

1. Feedback

Select the following answers:

Are you a customer or partner?	I'm an Okta customer adding an internal
App Type	This is an internal app that we have created

4

Click on Finish.

Get metadata.xml file

SAML signing certificates

1

Go back to the App settings.

2

Click on the Sign On tab.

3

Scroll down to the SAML Signing Certificates section.

4

Make sure the current certificate is Active

5

Click on Actions>View IdP metadata

Your metadata.xml file is created.

You can now import it on AB Tasty.

6

Save the file named yourcompany.xml.

7

Once the configuration is done, use the metada.xml along with your testing credential to configure the SSO on your AB Tasty account.

If you can’t create those testing credentials, ask your CSM to plan a screen-shared video call to activate the QA and login with SSO on your AB Tasty account.

User assignments

This section will allow access to abtasty-idp for a single user or a group:

1

On your Okta account, go to the admin settings http://{your-workspace}-admin.okta.com

2

On the left panel, click on Applications > Applications > Assign

3

Select Assign to people for a single user access, or Assign to group to grant access for a previously created group.

4

Use the search bar to find the targeted user or group

5

Click Assign beside every entity you want to grant access.

6

To save the selection and grant SSO access, click Done.