...
2. Prepare IDP
Copy and save the Callback Reply URL for later. You will need this when configuring OktaGoogle GSuite.
...
Configure
...
| Status | ||||
|---|---|---|---|---|
|
Login to Okta as an admin user. https://admin.google.com
Go to Applications → Applications in the menu and choose Create App Integration.
...
Choose SAML 2.0 as Sign-in method and click Next.
...
Under General Settings enter a suitable App name and click Next.
...
Paste the Callback URL you kept from the KSSO setup wizard in the Single sign on URL and the Audience URI fields.
Then add the following attributes to the Attribute Statements list:
givenName with format Unspecified and value user.firstName
surname with format Unspecified and value user.lastName
email with format Unspecified and value user.email
...
Click Next.
Fill out appropriate background info for the Okta support team and click Finish.
...
On the next page, locate and click the View SAML setup instructions button. Its located in the bottom right part of the page.
...
This opens a page with SAML setup information.
Copy all the XML content from the IDP metadata text field, located under the Optional heading at the bottom of the page. You will need this content afterwards in the KSSO setup wizard.
Note that all content of the IDP metadata text field may not be visible without expanding the text field size.
...
Apps → Web and mobile apps. Click Add App and choose Add custom SAML app.
...
Choose a suitable App name and click Continue.
...
Click the Download metadata button to download an XML metadata file that you will need later in the KSSO Setup Wizard. Once you have downloaded the file, click Continue.
...
Paste the Reply URL that you kept from the Prepare IDP step above into both the ACS URL and the Entity ID fields. Click Continue.
...
On the next step, add the following mappings:
Basic Information → First Name maps to givenName
Basic Information → Last Name maps to surname
Basic Information → Primary email maps to email
Click Finish.
...
You should now see the SAML app status screen. If you did not download the metadata file earlier you can also do this here.
...
Go back to the Kantega SSO setup wizard.
3. Metadata
Choose Paste Upload metadata XML file.Paste the XML
content you kept from the Okta app integration setup into the associated text field and click Browse and upload the metadata file you downloaded in the previous step. Click Next.
...
4. Redirect URL
No need to do anything. The Redirect URL is automatically fetched from the metadata you imported in the previous step.
...
Test that the log in with Okta Google works as expected. This will help identify if there are any issues with the configuration. Follow the steps to perform the login test.
...