1. What is Okta SSO?
Okta SSO (Single Sign-On) is a cloud-based identity management service that allows users to authenticate and access multiple applications with a single set of credentials. It eliminates the need for users to remember multiple usernames and passwords for different applications, providing a seamless and secure login experience.
2. What is SAML?
SAML (Security Assertion Markup Language) is an XML-based open standard for exchanging authentication and authorization data between identity providers (IdPs) and service providers (SPs). It enables SSO by allowing the identity provider to authenticate the user and assert their identity to the service provider.
3. How does Okta SSO with SAML work?
Integrating Okta SSO with SAML involves configuring Okta as the identity provider and Veryfi API Portal as the service provider. When a user tries to access Veryfi API Portal, they are redirected to Okta for authentication. Once the user is authenticated, Okta generates a SAML assertion containing the user's identity information and sends it to Veryfi, where SAML assertion is verified and access to the user is granted.
4. What are the prerequisites for integrating Okta SSO?
To integrate Okta SSO with SAML, you need the following:
An Okta account: Sign up for an Okta account if you don't have one.
Access to Veryfi API Portal Keys Settings: Ensure you have administrative access to Keys Settings to configure the SAML integration.
SAML configuration details such as Veryfi Application Callback URL, Sign on URL, Sign out URL, Issuer and Signing Certificate
🔔 Access to SSO is not enabled by default for your user account. To request access, please reach out to our support team support@veryfi.com.
5. How do I integrate Okta SSO with Veryfi?
Here's a general overview of the steps involved in integrating Okta SSO with Veryfi:
Log in to your Okta account.
Navigate to the Okta Admin Console → Applications
Create a new SAML 2.0 application
Add application name
Go to Configure SAML Tab
Now, switch to Veryfi API Portal and navigate to Keys Settings
Click Add SSO Credentials
Copy the Application Callback URL.
Switch back to Okta and paste Veryfi Application Callback URL to Single sign-on URL field
Fill in Okta Audience URI fields with https://app.veryfi.com
Navigate to Feedback Tab and Finish configuration
Once the application is added, click on the "Sign On" tab within the application configuration page and expand SAML2.0 details
Expand SAML metadata for the identity provider. You will need next values to configure Veryfi SSO Credentials: Sign on URL, Sign out URL, Issuer and Signing Certificate.
Now, switch to Veryfi API Portal SSO Credentials configuration.
Provide the SAML configuration details obtained from Okta in the appropriate fields.
Fill in Provider fields with "Okta" value
Fill in Entity ID with Okta's Issuer value
Fill in SSO URL with Okta's Sign on URL value
Fill in SLO URL with Okta's Sign out URL value
Fill in Certificate with Okta's Signing Certificate value
Save SSO Credentials
Test the integration by switching back to Okta
Go to Assignment Tab and Select Assign to People
Assign users to access Veryfi
Go to My End User Dashboard
Click on the Veryfi app and you will be automatically logged in Veryfi API Portal
If you have any questions or have any troubles, please contact support@veryfi.com.