Okta SSO Setup Guide

How to integrate Narrative & Okta

Overview

Okta is a popular Single-sign on (SSO) provider and identity management service. Okta makes it easy to integrate with corporate directories, as well as on-premise, cloud-based, and mobile apps. With Okta, you can enter your login information once and access all your work applications and tools, including XSpecs, without being prompted to log in to each of them.

XSpecs is available within the Okta app catalog. This is a step-by-step guide on how to set up for XSpecs with Okta as your SAML 2.0 identity Provider (Idp).

Requirements

An active Okta administrator account.

Supported Features

The Okta/XSpecs SAML integration currently supports the following features:

  • IdP-initiated SSO
  • Just-In-Time provisioning

For more information on the listed features, visit the Okta Glossary.

Configuration Steps

1) Log in to your Okta admin dashboard.

2) Navigate to Applications > Browse App Catalog.

3) Search for and select XSpecs.

4) On the Xspecs page click the Add Integration button.

5) Enter your Okta Subdomain (also known as the tenant name) and click Save. Example: if you Org URL is companyname.okta.com, then companyname would be your subdomain.

6) Copy the Metadata URL from the Okta Admin Console, SAML 2.0 Sign on methods section.

7) Email the Subdomain configured in Advanced Sign-on Settings and a copy of your Metadata URL value to support@xspecs.ai with the subject, Okta SAML Configuration Metadata.

8) The support team will process your request and let you know when you account has been set up

Supported Attributes

XSpecs's integration with Okta leverages Just-In-Time (JIT) provisioning to synchronize user profile information upon each login. The following SAML attributes from Okta are supported and will be updated in XSpecs accordingly:

| XSpecs Field | SAML Attribute from OKTA |
| email        | user.email               |
| given_name   | user.firstName           |
| family_name  | user.lastName            |