Page Comparison

EmpowerID provides integration with Okta to serve as the Identity Provider (IDP) for EmpowerID, enabling a seamless integration. With this integration, users can access the EmpowerID by authenticating the credentials from Okta SSO. In order to enable Single Sign-On (SSO), you'll need to establish a SAML connection within your EID system and then configure the SAML settings in Okta.

As a prerequisite to creating an SSO Connection for UltiPro as a service provider in EmpowerID, you must have an Okta account.

Please follow the instructions below to set Okta as an IdP.

Create a SAML Connection in EmpowerID

1. On the navbar, expand Apps and Authentication and click SSO Connections. Now click on SAML.

2. You can view all SAML connections and create a new one by clicking the icon.
   

   

3. When selecting a SAML connection type, it's important to determine whether the connection will operate as an Identity Provider (IdP) or if it will utilize EID as its IdP. In this article, we'll use the Identity Provider option as our example, as we intend to configure Okta to function as the IdP. Please select the Default SAML IdP connection Settings.

   • The Service Provider (SP) is an application or service that depends on the EID as an Identity Provider (IdP) to authenticate and provide access to users. It uses specialized software to process SAML requests and responses, which contain SAML assertions from the IdP. This This integration allows the SP to manage user access in an efficient mannerefficiently using EID.

   • The Identity Provider (IdP) is responsible for authenticating users and providing access permissions to for the EmpowerID application. It generates SAML assertions for users after authentication, which EID then uses to grant or deny access to their resources.
     

     

4. Please provide the connection details for the SAML connection.

   Insert excerpt
   IL:Set Up SSO with Okta IL:Set Up SSO with Okta name SAMLConnectionGeneral nopanel true

   

5. Please provide the URL of your Okta instance that will be used for Single Sign-On (SSO) authentication.
   

   

6. Please provide the Logout URL and the Logout SAML HTTP protocol used.

   • The Logout URL is the Single Logout (SLO) URL provided by Okta. This URL will handle the logout process, ensuring that the user's session is terminated in both EmpowerID and Okta.

   • The Logout SAML Protocol is the HTTP method to send SAML requests. To configure Okta in EID, please select the HTTPPost option.
     

     

7. You can create a new account, Directory or you can select an existing account directory.

   • Select the checkbox Create a New Account Directory to create a new account directory.

   • Alternatively, you can choose to select an existing account directory.
     

     

8. Please provide the necessary information related to the Certificates for the SAML connection.

   • The Signing Certificate is used by the IdP to digitally sign the SAML assertions and messages it sends to the SP. The SP, when receiving these messages, can use the IdP's signing certificate to verify the message's integrity and authenticity. It should be the public key.

   • The Verifying Certificate is used by the SP to verify the digital signatures on SAML assertions and messages sent by the IdP. The SP uses the verifying certificate to ensure that the messages it receives are genuinely signed by the trusted IdP and that they haven't been altered or forged.

9. Click on the Authn Request tab and select Create a New Authentication Request. You have the option to create a new one or use an existing SAML Authentication Request. Enter the required details to create a new
   authentication request.
   

   Insert excerpt
   IL:Set Up SSO with Okta IL:Set Up SSO with Okta name SAMLConnectionGeneral nopanel true

   

Configure SAML in Okta

You can create a SAML app directly from the Okta dashboard to integrate Okta with EID. Please follow Okta's relevant documentation to ensure the SAML app is created accurately. However, please ensure you correctly enter all the information below about EmpowerID in the Okta app.