Integrating Okta SSO with EqualGround allows users to log in to EqualGround with their Okta credentials.
Locating Your EqualGround Identifier Key
The identifier key is required to create an EqualGround application on Okta.
- Log in to EqualGround as an admin.
- In the side navbar, select Configuration > Organization Info.
- Copy the Identifier Key for later use.
Adding EqualGround to Okta as an Application
Next, you'll need to add EqualGround as an application on Okta.
- Log in to Okta as an admin.
- In the side navbar, select Applications > Create App Integration.
- Select SAML 2.0, and then click Next.
- In the App name field, enter YuJa EqualGround, and then click Next.
- Enter the Single sign-on URL and the Audience URI using your custom URL in the following format. If you do not have a custom URL, use your zone.
-
Single sign-on URL: Replace <YOUR_Identifier_Key> with the identifier key copied in step 3 of Locating Your EqualGround Identifier Key.
- US Zone: https://equalground.yuja.com/api/sso/samlReceiveResponse?identifierKey=<YOUR_Identifier_Key>
- Canadian Zone: https://equalground-cz.yuja.com/api/sso/samlReceiveResponse?identifierKey=<YOUR_Identifier_Key>
- European Zone: https://equalground-ez.yuja.com/api/sso/samlReceiveResponse?identifierKey=<YOUR_Identifier_Key>
- Australian Zone: https://equalground-az.yuja.com/api/sso/samlReceiveResponse?identifierKey=<YOUR_Identifier_Key>
-
Custom URL: https://<YOUR_CUSTOM_EqualGround_URL>/api/sso/samlReceiveResponse?identifierKey=<YOUR_Identifier_Key>
- Example: https://hudsonu.equalground.yuja.com/api/sso/samlReceiveResponse?identifierKey=9856168ce455592621561e14123d4
-
Audience URI (SP Entity ID)
- US Zone: https://equalground.yuja.com
- Canadian Zone: https://equalground-cz.yuja.com
- European Zone: https://equalground-ez.yuja.com
- Australian Zone: https://equalground-az.yuja.com
-
Custom URL: https://<YOUR_CUSTOM_EqualGround_URL>
- Example: https://hudsonu.equalground.yuja.com
-
Single sign-on URL: Replace <YOUR_Identifier_Key> with the identifier key copied in step 3 of Locating Your EqualGround Identifier Key.
- In the Name ID format field, select EmailAddress.
- In the Attribute Statements section, enter the Attribute Statements using the following format.
- Name: Email, Name format: Unspecified, Value: user.email
- Name: FirstName, Name format: Unspecified, Value: user.firstName
- Name: LastName, Name format: Unspecified, Value: user.lastName
- Name: Role, Name format: Unspecified, Value: user.title
- Click Next.
- Select the This is an internal app that we have created check box.
- Click Finish.
- Click the Assignments tab.
- Click Assign > Assign to People or Assign to Groups to add new users into EqualGround.
- Locate the user or group you want and click Assign.
- Click Save and Go Back.
- Click Done.
- Click the user that you want to give the admin role to.
- Click the Profile tab > Edit.
- In the Title field, enter the role name for admins.
Example: IT Manager. - Click Save.
Getting Okta’s Identity Provider SSO URL and Certificate Fingerprint
Once you've added EqualGround to Okta as an application, you'll need Okta's identity provider SSO URL and certificate fingerprint.
- Log in to Okta as an admin.
- Click Applications.
- Select YuJa EqualGround from the Applications list.
- Select the Sign On tab.
- Click View SAML setup instructions.
- Copy the Identity Provider Single Sign-On URL and X.509 Certificate, including the BEGIN CERTIFICATE and END CERTIFICATE text, for later use.
- Go to One Login SAML Tool.
- In the X.509 field, paste the X.509 Certificate copied in step 6 and then click Calculate Fingerprint.
- Copy the FingerPrint for later use.
Integrating Okta with EqualGround
Once you've gotten Okta's identity provider SSO URL and certificate fingerprint, you can integrate Okta with EqualGround.
- Log in to EqualGround as an admin.
- In the side navbar, select Configuration > Integration Settings.
- In the Select Integration field, select SSO - SAML.
- Turn on the Allow authentication via SSO toggle.
- Enter the information as shown below.
- SSO URL: Obtained in step 6 of Getting Okta's IdP and Certificate Fingerprint.
- Name ID Format: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
- Signing Certificate SHA-1 Fingerprint: Obtained in step 9 of Getting Okta's IdP and Certificate Fingerprint.
- Given Name Attribute: FirstName
- Family Name Attribute: LastName
- Email Attribute: Email
- Role Attribute: Role
- Turn on the Enable SSO Mapping toggle.
- In the Admin Mapping field, enter the name of the admin role that you added in step 18 of Adding EqualGround to Okta as an Application.
- Click Save Changes to complete the integration.
Note: Click Launch SSO Login Page to test the integration.