> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Tenant Admin Portal - How to Configure Security Assertion Markup Language (SAML) - Okta IDP Profile

> This document provides step-by-step instructions to configure Security Assertion Markup Language (SAML) - Okta IDP Profile in the Tenant Admin Portal.

## Introduction

The SAML–Okta Identity Provider (IdP) Profile enables secure authentication between Okta and the Oloid Tenant Admin Portal. Configuring SAML allows users to sign in to Oloid applications using their Okta credentials.

## Prerequisites

* You must have access to the Tenant Admin Portal.
* Ensure that the **SAML IDP** application is created. To create SAML application, refer [How to Create IDP Profile for Security Assertion Markup Language (SAML) in the Tenant Admin Portal](https://oloid.help/en/articles/12808717-how-to-create-idp-profile-for-security-assertion-markup-language-saml-in-the-tenant-admin-portal).
* Ensure that the required **Okta SAML parameters** are available or can be generated from the SAML Identity Provider configuration in the Okta Admin Console. To see the parameter, refer [How to Configure Security Assertion Markup Language (SAML) IDP in OKTA Admin Console](https://oloid.help/en/articles/12838654-how-to-configure-security-assertion-markup-language-saml-idp-in-okta-admin-console).
* Ensure that the Webkey application is created. To create Webkey application, refer [How to create and configure WebKey Application in Tenant Admin Portal](https://oloid.help/en/articles/8693859-how-to-create-and-configure-webkey-application-in-tenant-admin-portal).

## Steps to Configure SAML-Okta IDP Profile

1. Log in to the **Oloid Tenant Admin Portal**.
2. On the **Applications** page, click **Auth Policies** > **Identity Provider**.

   ![How to Configure Security Assertion... - screenshot 1](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/image-17a59e0b.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=8bd19c2c768a6ed18dfd0cb59ab6d3b1)

   The **Identity Provider Profiles** page is displayed.
3. Click preferred SAML-IDP application.

   ![How to Configure Security Assertion... - screenshot 2](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-f461ca72.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=0dbd6088e9d81868a398215532efa088)

   The IDP details page is displayed.

   ![How to Configure Security Assertion... - screenshot 3](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/image-6a36c740.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=f8bf3f3aa1fbd2ffa4ec416b84a999b3)
4. Do the following:
   1. [Configure Details tab](https://oloid.help/en/articles/9215949-how-to-configure-oidc-okta-idp-profile#h_b9bb2a15fd)
   2. [Integrate Metadata tab for Okta Settings](https://oloid.help/en/articles/9215949-how-to-configure-oidc-okta-idp-profile#h_9da1653b28)
   3. [Configure IDP Settings tab](https://oloid.help/en/articles/9215949-how-to-configure-oidc-okta-idp-profile#h_18d3ee2df6)
   4. [Configure Claims tab](#configure-claims-tab-optional)
      The IDP Profile is configured successfully.

### Configure Details Tab

The Details tab is used to view and manage the basic information for the Microsoft Entra ID identity provider configured in the Tenant Admin Portal.

To configure the Details tab, do the following:

1. Edit the **IDP Name** (if required).

   ![How to Configure Security Assertion... - screenshot 4](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-87225587.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=9efe825c35d62de7fc402ec98081187f)
2. Enter **Description** (optional).

   ![How to Configure Security Assertion... - screenshot 5](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-ac00c43f.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=42d38476210554ee802a5d3d4586beac)
3. Do one of the following:
   1. Select the required WebKey application from the **Select WebKey Application** drop-down list.

      ![How to Configure Security Assertion... - screenshot 6](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/237af1cd-9508-460c-8c25-623bf278eec6-5d768e66.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=3f9890cf87b446cb0474b1f50c9f2911)

      (OR)
   2. Click **Make Default**.

      > [!NOTE]
      >
      > **Note:** The **Make Default** button is enabled only when more than one IDP is added in the Tenant Admin Portal.

      ![How to Configure Security Assertion... - screenshot 7](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/image-24aac28e.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=373a3600733d70efeef69162cd3fccef)

      The **Set this as Default IDP** pop-up box is displayed, do the following.

      * Select the **Webkey Application** from the drop-down.
      * Click **Set as Default**.

        ![How to Configure Security Assertion... - screenshot 8](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-7f29d9be.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=86ee62c6956d1983dac8e61984989035)

        > [!NOTE]
        >
        > **Note:** If another IDP is currently set as default, it will be replaced upon confirmation.

        * To make IDP as default, click **Make Default**. The confirmation pop-up box is displayed.
        * Click **Set as Default** to designate the preferred IDP as default.

          ![How to Configure Security Assertion... - screenshot 9](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/fd786cd3-9105-4326-b0c0-d84a80db1990-24b6b026.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=dd54bc4061cf84f1debbf8210b4837d4)

          The WebKey application is linked to the IDP.
4. Click **Save.**

   ![How to Configure Security Assertion... - screenshot 10](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/de22b4eb-8149-422b-a436-a222a34c816a-64a5fc28.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=9b0eeb62dfc52f087e0a844df4bbf604)

   The Linking IDP top Application pop-up box is displayed.
5. Click **Confirm Action**.

   ![How to Configure Security Assertion... - screenshot 11](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/7b3edc9f-1c44-49b3-8322-db75f54f2e64-942f921e.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=c243caf131a7110330f6ea91e2d9821b)

   Details tab is configured successfully.

   ![How to Configure Security Assertion... - screenshot 12](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/image-49ba0783.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=a2171665ff6f62bd89e7633848110532)

### Configure Metadata Tab

The Metadata tab is used to provide the required information to configure SAML settings and enable SAML-based authentication between the identity provider and the Tenant Admin Portal.

1. Click **Oloid Metadata** tab.
   The Oloid Metadata tab is displayed.
2. Click **[Visit help page](https://oloid.help/en/articles/12838654-how-to-configure-security-assertion-markup-language-saml-idp-in-okta-admin-console)** for the document to configure Okta settings for SSO login.
3. Do the following:
   1. **Download Certificate:** Download the certificate and upload it to the **IdP Signature Certificate** field.
   2. **Sign-On URL:** Copy the Sign-on URL and enter it in the **IdP Issuer URL** field.
   3. **Entity ID:** Copy the Entity ID and enter it in the **Sign-on URL** field.

      ![How to Configure Security Assertion... - screenshot 13](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/d886fb5a-5efd-4d4b-ba49-f152d180767c-8a890b05.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=ffea202dfa10913b8d273eb808d4d312)

      > [!NOTE]
      >
      > **Note:** You can find the **IdP Signature Certificate, IdP Issuer URL** and **Sign-on URL** fields on the SAML protocol section on SAML in OKTA Admin Console. For more details, click **[here](https://oloid.help/en/articles/12838654-how-to-configure-security-assertion-markup-language-saml-idp-in-okta-admin-console#h_a0fd430a3c:~:text=Under%20SAML%20Protocol%20Settings%20sections)**.

      ![How to Configure Security Assertion... - screenshot 14](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/7e0b665f-e088-4146-846e-781116b07fc6-4fe524da.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=b3aa2c582dd324008deb5f90d2ea6124)

### Configure IDP Settings Tab

The **IDP Settings** tab is used to configure and upload the required SAML details to enable authentication between the identity provider and Tenant Admin Portal.

To configure the IDP settings tab, do the following:

1. Click the **IDP Settings** tab.

   ![How to Configure Security Assertion... - screenshot 15](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/e4e6b13e-3b94-41a0-9bf0-88c9928d3c81-63250969.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=8084dfc06ed8dd3287bc55062df6edf8)

   The IDP Setting tab is displayed.
2. Do one of the following to configure the IDP Settings tab.
   1. Upload **Metadata** file.

      ![How to Configure Security Assertion... - screenshot 16](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-97a91173.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=44ea0deeaa613b68b17206ed49a0f496)

      OR
   2. Enter **Entity ID**.

      ![How to Configure Security Assertion... - screenshot 17](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-ddc1c7c3.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=83753ff774963d21b9d1d2e76f75045a)
   3. Enter **ACS URL**.

      ![How to Configure Security Assertion... - screenshot 18](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-9dbb7556.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=f49f84bf9146d0c24fea6140c6565313)

      > [!NOTE]
      >
      > **Note:** You can find the **Metadata file, Entity ID** and **ACS URL** on the SAML application details page. For details, click **[here](https://oloid.help/en/articles/12838654-how-to-configure-security-assertion-markup-language-saml-idp-in-okta-admin-console#h_a0fd430a3c:~:text=Go%20to%20IDP%20details%20and%20do%20the%20following)**.

      ![How to Configure Security Assertion... - screenshot 19](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-f3afdd05.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=e7196b185daa6d31c0718eb8212cd984)
   4. Select **Name ID Format** from the drop-down.

      > [!NOTE]
      >
      > **Note:** By default, Email Address is selected.

      ![How to Configure Security Assertion... - screenshot 20](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/image-6b1d5e03.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=bef6dcac1433a491de7e8e7320849858)
   5. Select **SAML Subject** from the drop-down.

      > [!NOTE]
      >
      > **Note:** By default, Email is selected.

      ![How to Configure Security Assertion... - screenshot 21](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/image-085c6b0c.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=896e7c9faa65cfb89adf904a71955506)
   6. Enter **Home URL:** Enter the URL of the home page.
   7. Enter **Home Button Label**: Enter the text displayed on the **Home** button.

      ![How to Configure Security Assertion... - screenshot 22](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-c788f1ed.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=a34a93fd599a27b9f85ab1db09e782bd)
   8. Click **Save**.

      ![How to Configure Security Assertion... - screenshot 23](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-911a039a.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=61c9ec15004dbf1f2a09e80fea5d399a)

      IDP settings tab is configured successfully.

### Configure Claims Tab (Optional)

The **Claims** tab is used to configure custom claims that pass user attributes from Oloid to the SAML provider.

Do the following:

* [Additional Claims](#add-additional-claims)
* [Group Claims](#group-claims)

  ![How to Configure Security Assertion... - screenshot 24](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/image-7d3efb72.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=b746271e01654bbc0806e3910dca8740)

#### Add Additional Claims

Additional Claims allow the admin to map Oloid user attributes to SAML attributes.

Do the following:

1. In the **Additional Claims** section, click **Add Field**.

   ![How to Configure Security Assertion... - screenshot 25](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-810274ca.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=44b6f2c98cefc1fea018c01495618ebc)

2. In the **SAML Claim** field, enter the claim name to be sent to the service provider.

3. Selectone of the following types.
   * **Basic:** Standard claim format.
   * **Unspecified:** No specific format defined.
   * **URI Reference:** Claim uses a URI-based format.

4. In the **Oloid Value** dropdown, select the corresponding Oloid attribute (for example, Oloid ID).

   > [!NOTE]
   >
   > **Note:** Click **Add Field** to add additional claim items.

5. Click **Save.**

   ![How to Configure Security Assertion... - screenshot 26](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-8431ae5d.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=8dc3887e6b752d4ad04ff1dfa7d8c2f3)

   The Custom claims tab is configured.

#### Group Claims

The **Group Claims** section allows you to pass user group-related attributes from Oloid to the Service Provider during authentication.

1. In the **Group Claims** tab, expand the **Group Claims** section.
   The Group Claims section is displayed.
2. Click **Add Field**.

   ![How to Configure Security Assertion... - screenshot 27](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-ad0015a8.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=7463250a375116cd3d039be1c5d8a485)
3. Enter the following details:
   1. **Attribute Name**: Enter the group attribute name to be sent to the Service Provider.
   2. **Type**: Select the claim format:
      1. **Basic**
      2. **Unspecified**
      3. **URI Reference**
   3. **Oloid Value**: Enter or select the group-related value.
   4. **Condition**: Select one of the following:
      1. **Contains**
      2. **Equal**
      3. **Starts With**
4. Click **Save**.

   ![How to Configure Security Assertion... - screenshot 28](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/906fabe7-8c5d-498b-8e8a-9edd285867d3-ca254299.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=0762a117553a4ec8f68e29b14a8642e2)

   The **Group Claims** section is configured successfully.

   ![How to Configure Security Assertion... - screenshot 29](https://mintcdn.com/oloid-999c42b2/1zBIoZFiOFWUXgsE/images/intercom/12840218/image-8387edaa.png?fit=max\&auto=format\&n=1zBIoZFiOFWUXgsE\&q=85\&s=483658843f811f7e3c75906a757e6b3d)

   The **SAML IDP** is successfully configured.

   ![How to Configure Security Assertion... - screenshot 30](https://mintcdn.com/oloid-999c42b2/Ig3Ofa3DxLH6vY_d/images/intercom/12840218/698e087f-a41c-4a85-b3f5-79d9a0e6d986-26d00f44.png?fit=max\&auto=format\&n=Ig3Ofa3DxLH6vY_d\&q=85\&s=9399e1161b39bb4c52397424b71aaa82)