Okta SAML Integration Guide

1. Sign in to the Okta Admin Console
2. Go to Directory → People
3. Click Add Person
4. Fill in the following:

5. Click Save

1. In the Okta Admin Console, go to Security → Administrators
2. Click Add Administrator
3. In the Grant administrator role to field, search for [email protected] and select the user
4. Select Super Administrator (or your preferred admin role)
5. Click Save

1. Go to Security → Identity Providers
2. Click Add Identity Provider
3. Select SAML 2.0 IdP and click Next
4. Enter a descriptive name (e.g., “SplitSecure”)

5. Click Finish

Create a routing rule so Okta redirects users in the @splitsecure.mycompany.com domain to SplitSecure for authentication.

1. Go to Security → Identity Providers → Routing Rules
2. Click Add Routing Rule
3. Configure the rule:

4. Click Create Rule
5. Click Activate when prompted

If you plan to create multiple SplitSecure admin users with different permission sets, create a group to manage them collectively.

1. Go to Directory → Groups
2. Click Add Group
3. Enter a name (e.g., “SplitSecure Admins”) and a description
4. Click Save
5. Click on the newly created group, then click Assign people
6. Search for [email protected], click + to add, then click Save

1. Go to Security → Authentication Policies
2. Click on the Okta Admin Console policy
3. Click Add Rule
4. Enter a rule name (e.g., “SplitSecure MFA”)
5. Configure the rule:

6. Click Save

SplitSecure’s authorization and vote process sends the following AMR (Authentication Methods References) claims in the SAML assertion, which Okta honors because Claims is set to Yes in the Identity Provider configuration:

1. In the Okta Admin Console, navigate to Security → Identity Providers
2. Locate your IdP and click Actions → Configure Identity Provider
3. In the Summary card, click Download metadata and save the XML file

1. In SplitSecure, navigate to External Services → New External Service → Okta
2. Enter a name for your service
3. Select the IdP you configured Okta with during the Identity Provider configuration step
4. Upload the metadata file downloaded in Step 1
5. Click Create

1. In SplitSecure, navigate to External Services
2. Locate your Okta service and click Authenticate
3. Enter [email protected] and click Request Access
4. Complete the SplitSecure authorization and vote process
5. After approval, you should be logged in to Okta as the SplitSecure Admin user

1. Open the Okta sign-in page for your organization
2. Enter [email protected] as the username
3. The routing rule should redirect you to SplitSecure (no password prompt)
4. Complete the SplitSecure authorization and vote process
5. After approval, you should be redirected back to Okta and logged in