> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Configure Security Assertion Markup Language (SAML) IDP in OKTA Admin Console

> This document provides information on how to configure SAML IDP for Oloid SSO in the OKTA Admin Console.

## Introduction

This document explains how to configure Security Assertion Markup Language (SAML) as an Identity Provider (IdP) using **Okta** for Oloid application. The configuration involves creating a SAML IdP in the Okta Admin Console and configuring Oloid application with the SAML.

## Prerequisites

* You must have Admin access to the Okta Admin Console.
* Ensure Webkey application is created. To create Webkey application, refer [How to create and configure WebKey Application in Tenant Admin Portal](https://oloid.help/en/articles/8693859-how-to-create-and-configure-webkey-application-in-tenant-admin-portal).
* Ensure the SAML IDP application is created. To create SAML application, refer [How to Create IDP Profile for Security Assertion Markup Language (SAML) in the Tenant Admin Portal](https://oloid.help/en/articles/12808717-how-to-create-idp-profile-for-security-assertion-markup-language-saml-in-the-tenant-admin-portal).

## Steps to Add Identity Provider

1. On the home page of the Okta Admin Console, go to **Security** > **Identity Providers**.

   ![How to Configure Security Assertion... - screenshot 1](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-fe9a1465.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=33c58f5acfa4ef85c65df549e3d05248)

   Identity Providers page is displayed.
2. Click **Add Identity provider**.

   ![How to Configure Security Assertion... - screenshot 2](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-4ccaa461.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=03fa2b75be552266d89d6aa756d8d2d7)

   The identity provider list is displayed.
3. Select **SAML** and click **Next**.

   ![How to Configure Security Assertion... - screenshot 3](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-62c34b3a.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=521d73e6d398db8afb41e7b6da452a81)

   The **Configure SAML 2.0 IdP** popup box is displayed.
4. Do the following:
   1. Under **General settings** section, enter **Name** for the Identity Provider configuration.

      ![How to Configure Security Assertion... - screenshot 4](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-073e936f.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=d530f19ac32737f5d5492625c81378c2)
   2. Under **Account matching with IdP Username** section:
      1. Select the **IdP username** from the dropdown list\*\*.\*\*

         > [!NOTE]
         >
         > **Note:** It is recommended to select **idpuser.subjectNameId** in the idP username field.

      2. Select **Enable automatic linking** in **Account link policy** to allow Okta to automatically link the IdP user to an existing Okta user account.

      3. In the **If no match is found** section, select **Redirect to Okta Sign-in page**.

         ![How to Configure Security Assertion... - screenshot 5](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-f549caf1.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=b76619f9b13f18b3e29cb451d8cdf1c4)
5. Under **SAML Protocol Settings** sections:
   1. Enter the **IdP Issuer URL**.
      See **Tenant Admin Portal > Identity Provider > SAML Application > Oloid Metadata** tab and copy **Entity ID**.
   2. Enter the **IdP Single Sign-On URL**.
      See **Tenant Admin Portal > Identity Provider > SAML Application > Oloid Metadata** tab and copy **Sign-on URL**.
   3. Upload the **IdP Signature Certificate**.
      To download, go to **Tenant Admin Portal > Identity Provider > SAML Application > Oloid Metadata** tab and select **Download Certificate**.
   4. Request Signature, **Unselect** the **Sign SAML Authentication Request**.
   5. Select Response in Response Signature Verification.
   6. Click **Finish**.

      ![How to Configure Security Assertion... - screenshot 6](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-4fb1578f.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=529a0f8b5915e76083ae08bd0b07325a)

      ![How to Configure Security Assertion... - screenshot 7](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-18d7ced4.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=74e5f0ffdfdf8274db5b8215682aba7e)

      IDP created successfully and listed under **Security** > **Identity Providers.**

      > [!NOTE]
      >
      > **Note:** In the search bar, you can search using identity provider name.

      ![How to Configure Security Assertion... - screenshot 8](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/6f67d569-1a2a-4e9e-9d64-7cce5a17fe2b-5855c656.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=5e1e5639771dcb1e2098f57aa6e191f5)
6. Go to IDP details and do the following:
   1. Download the Metadata file and upload it in the Metadata field under **Tenant Admin Portal > Identity Provider > SAML Application > IDP Settings > Metadata.**
      OR
   2. Copy **IDP ID** and enter it in **Tenant Admin Portal > Identity Provider > SAML Application > IDP Settings > Entity ID**.
   3. Copy **Assertion Consumer Service URL** and enter it in **Tenant Admin Portal > Identity Provider > SAML Application > IDP Settings > ACS URL**.

      ![How to Configure Security Assertion... - screenshot 9](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-812d4f12.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=ca53126369ffe0d6b8545705fc48c9e8)

      ![How to Configure Security Assertion... - screenshot 10](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-09de7437.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=9712f92ee0157d26cf1d2dd5e0493d77)

## Add Routing Rules

### Steps to add Routing Rules

1. In the Okta Admin Console, on Identity Providers Screen, go to **Routing rules >** Click **Add Routing Rule.**

   ![How to Configure Security Assertion... - screenshot 11](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-ca2fd3e3.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=f07af2c6abce731463bffec6d5447b57)

   The Add Rule pop-up box is displayed.
2. Do the following:
   1. Enter **Rule Name.**

   2. Select **User matches** from the Dropdown list.

      > [!NOTE]
      >
      > **Note:** Select **Regex on Login and enter the mail.**

   3. Select **Use this Identity provider** from the drop-down list.

      > [!NOTE]
      >
      > **Note:** Select the Identity Provider added in **Step 1**.

   4. Click **Create rule**.

      ![How to Configure Security Assertion... - screenshot 12](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-aa6fb89d.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=6cff7a19bd434dd7414a958c732c7424)

      The rule is created successfully and added on the Routing Rule list.

      ![How to Configure Security Assertion... - screenshot 13](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/image-4195bddd.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=7d7a42c325ca9055423b991d6949276b)
3. Configure the IDP Profile in the Tenant Admin Portal.
   1. On the homepage of the portal, select the preferred IDP to edit.
   2. On the IDP details page, select the WebKey Application from **Select WebKey Application** dropdown.
   3. Click **Save**.

      ![How to Configure Security Assertion... - screenshot 14](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12838654/dd5ab6de-29d3-4a19-85f3-3008d1101ffa-7615ab17.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=ec5a5739250972d3e869cf75f4c81424)

***

##### Related Articles

[How to Configure Security Assertion Markup Language (SAML) - Okta IDP Profile in the Tenant Admin Portal](https://oloid.help/en/articles/12840218-how-to-configure-security-assertion-markup-language-saml-okta-idp-profile-in-the-tenant-admin-portal)