Setting up Okta SSO with Validis

Create App Integration In Okta

Navigate to the Admin dashboard of your Okta account and select Applications under the applications tab on the left navigation menu

Click on Create App Integration then select SAML 2.0 as the sign-in method and click Next

Give your app a name and upload a logo if desired then click Next

On the next screen, you will configure the SAML settings

For the fields shown, input the following:

Single sign-on URL: [portal URL]/oauth/saml20

• Input the URL you use to log into your portal followed by /oauth/saml20. Example: https//customerportal.US.validis.com/outh/saml20
• Ensure that the Use this for Recipient URL and Destination URL box is checked

Audience URI (SP Entity ID): This will be the same URL you input into the above field minus /oauth/saml20

Name ID format: Select EmailAddress from the dropdown

Application username: Select Okta username from the dropdown

Once this information is complete you may click on the Next button

You will be brought back to the application screen where you will see your newly created app, click on the app name to open up additional information

Click the Sign On tab

Scroll down slightly to the bottom of the Sign on methods section and click on More details

Next to the Signing Certificate field click on the Download button. This will, by default, download the signing certificate in a .CERT file format. You will need to change the file type to a .CRT file. You can do this by renaming the file type in the download window that appears, or after the download has completed.

Open your email application and draft an email to your Implementation Lead with the subject “[Client Name] SSO Credentials for Portal”

Click the Copy button under the URL in the Sign on URL field and paste it into the body of the email.

Attach the signing certificate to the email as well and click send.

Next, you will need to give users access to this app integration. Click on the Assignments tab in the app settings.

Click on the Assign tab and choose which Okta users, or group of users that will be using this app to sign on to the Validis portal. These will be the same users that were created in the Validis portal.

Once you receive confirmation from your Implementation Lead that the portal has been successfully configured please try signing onto your portal to verify the Okta app is functioning correctly.