Configuring SSO with Okta

Suggest Edits

Netography Pre-Configuration

Netography’s Security Settings and your Identity Provider settings need to be configured in parallel. To start, login to your Netography account as an administrator.

  1. Navigate to Account Settings > Security. In the Identity Provider section, enable Single Sign-on:

  1. Copy of the Assertion consumer service URL.  It will be needed as an input into Auth0 later.

Okta Walkthrough

Screenshot dates: 4/2022

  1. Navigate to Applications. Click Create App Integration and choose SAML 2.0.

  1. Provide the application name and logo. In the General Settings section, enter the following values into the corresponding fields:

    1. App name: Netography

    2. App logo (optional): https://netography.com/wp-content/uploads/2020/02/neto-logo-dark-400px.png

  1. Lookup/Copy SAML Integration values.  You will need to reference the following information from the Netography portal: Assertion Consumer Service, Entity ID, and account shortname.  These values are found in the Netography Service Provider Settings section in the Essentials area in SAML Single Sign-On Settings:

  2. In Okta, configure the General SAML Settings.

    1. Single sign on URL: Constructed using your account shortname.  This URL will be the following: https://fusion.netography.com/sso/<shortname.  Replace <shortname>with your company's identifier.  This can be found in the upper right (just under your name, in red) of the Netography portal.

    2. Use this for Recipient URL and Destination URL: uncheck

    3. Allow this app to request other SSO URLs: check

    4. Requestable SSO URLs: Paste the Assertion consumer service URL found in the Netography portal

    5. Recipient URL: Paste the same Assertion consumer service URL as above

    6. Destination URL: Paste the same Assertion consumer service URL as above

    7. Audience URI (SP Entity ID): Paste the Entity ID found in the Netography portal

  1. Configure SAML attributes.

    1. Fill the Attribute Statements section by completing the fields as indicated below:

  1. Fill the Group Attribute Statements section by completed the fields as indicated below:

!!! Note
You will need to assign users to these groups.

  1. Configure the application type by completing the fields as indicated below and click Finish.

  1. Download the metadata file. You'll need to upload this to Netography when you configure Okta as the identity provider.

Netography Post-Configuration

  1. Return to the Netography portal, and upload the metadata file to Netograph in the Metadata section in the Provider screen in the SAML Single Sign-On Settings page

  1. Click Next

  2. Now configure the User attribute mappers to match the mapper values configured in Auth0 above:

  1. Click Next. 

  2. Next configure the Default user role and role mappers:

    1. Default user role: This is the role an IDM-authenticated user will default to if the role mappings are not found in the SAML exchange.   For security purposes, we recommend setting this value to "readonly", but you may want to set this to "admin" as you are testing your configuration.

    2. Admin role mappers:  Configure these according to the screenshot below:

  1. Click the Save button.

Done! Now your users can log in directly via your identity provider using a new account-specific login URL.  The new SSO Login URL can now be found under the Essentials settings in the SAML Single Sign-On Settings page.

🚧

The default login will still work for your account administrator, which is not bound to your IDM.

❗️

Note: The corresponding internal account in the Netography Portal needs to be deleted first, as configuring the Okta SSO setup will show an error box will appear when a user logs in Okta if they already had an internal portal account with the same name.

Updated 5 months ago