Set Up Okta as IdP

Name

Provide a unique and descriptive identifier for the connection.

Display Name

Please provide a clear and easy-to-understand label that will appear in the application's user interface to represent the connection.

Name Identifier Format

Please select the format and structure of the unique identifier for the SAML assertion subject. This identifier represents the user or entity to which the SAML assertion refers. For Okta integration, select Unspecefied.

SAML Submission Method

Please choose the appropriate HTTP method to send SAML requests. Select HTTPPost for Okta integration.

Level of Assurance

If you use multifactor authentication and want to adjust the default Level of Assurance points for the connection, enter a new value in the Level of Assurance (LoA) field. For example, if the level of assurance (LOA) is set to two, the user will be required to complete at least two multifactor authentications.

Issuer

The issuer URL or Issuer Endpoint, is a specific web address or URL provided by the Identity Provider for SSO or authentication protocols like SAML. Please Enter the SAML Issuer URL from the application that you configured earlier in the Okta Platform.

Initiating URL

The URL that initiates the SMAL request from EmpowerID. The default value is "/WebIdPForms/Generic/AuthenticationRequest."

Tile Image URL

Please provide a URL for the image that will serve as the icon representing the Single Sign-On (SSO) connection on the login screen.

SP Name Qualifier

A unique identifier associated with EmpowerID, input EmpowerID.

Assertion Consumer URL

This URL is the endpoint where SAML assertions are sent from successful authentication and authorization by OKTA or the SP to EID or the IdP. Use https://{yourempoweridurl}/WebldPPorms/Generic/AuthenticationResponse as the URL. Replace 'yourempoweridurl' with the URL used to access EmpowerID, such as sso.empoweriam.com.

Submission Method

Please choose the appropriate HTTP method to send SAML requests. Select HTTPPost for Okta configuration.

Issuer Name

Identifier that specifies the entity that issued a SAML assertion or message.Please enter the issuer URL from your Okta app Integration

Signing Certificate

The signing certificate contains a public key and is used to digitally sign SAML assertion. Please choose the EID Federation Certificate as the signing certificate.

Verifying Certificate

Verifiying Certificate is used by the receiving party to verify the digital signature on a SAML message. .Please choose the EID Federation Certificate as the verifying certificate.

Single Sign-On URL (SSO URL)

Please provide the SAML endpoint URL in EID for SAML assertion that accepts HTTP POST. Input https://{yourempoweridurl}/WebldPPorms/Generic/AuthenticationResponse as the URL. Replace 'yourempoweridurl' with your organization URL used to access EmpowerID, such as sso.empoweriam.com.

Recipient URL

Provide the URL or endpoint where the Okta sends a SAML assertion to the EID during the Single Sign-On process. This URL will be the same as the SSO URL provided earlier; input https://{yourempoweridurl}/WebldPPorms/Generic/AuthenticationResponse as the URL. Replace 'yourempoweridurl' with your organization URL used to access EmpowerID, such as sso.empoweriam.com.

Destination URL

The destination URL specifies the destination within the SAML assertion where the SAML response is meant to be delivered from Okta. This URL will be the same as the SSO URL provided earlier; input https://{yourempoweridurl}/WebldPPorms/Generic/AuthenticationResponse as the URL. Please replace 'yourempoweridurl' with the URL used to access EmpowerID, such as sso.empoweriam.com.

Audience URI

Provide the specific identifier that serves as the intended recipient of a SAML assertion or response; please input EmpowerID. This should be the same as what we have provided in the SP Name Qualifier while configuring the SAMl connection in EmpowerID earlier.

Name ID format

Leave unspecified for the Name ID Format.

Application User Name

To identify a user within a specific application or service, you must provide their identifier or username. In the case of EmpowerID, you should select the AD SAM account name. To make this possible, you must create the attribute mapping for the SAM account name in your Active Directory in Okta. Once you have done that, you can choose the field here.