Okta

To set up SSO in Okta, follow these steps:

1. Configure your Identity Provider (IdP)
2. Configure the SSO in Sifflet
3. Test your SSO

📘

Requirements

To enable SSO in Sifflet, you need:

• a Sifflet admin account
• an Okta admin account with the same email address as the one used in Sifflet

1- Configure Your Identity Provider

To configure your IdP, follow these steps:
a. Log in to Sifflet and retrieve some SSO details
b. Add the Sifflet App in Okta
c. Assign the users to this App

a. Retrieve the SSO Details in Sifflet

• Connect to Sifflet with an admin account
• Go to Settings > SSO
• Toggle "Enable Single Sign-On (SSO)"
• Choose your Platform (Okta here)
• Save the information under "Sifflet Configuration". You need it in the next section.

b. Add the Sifflet App in Okta

• Log in to Okta
• In Applications > Create App Integration, choose the SAML 2.0 option

• On the following screen, you can add the app name, for instance "Sifflet"
• On the "Configure SAML" screen, enter the information saved from the last section:
  • Single sign on URL: must match the link in Single Sign on URL on Sifflet
  • Audience URI (SP Entity ID): must match the link in Audience Restriction on Sifflet
  • Make sure that the option "Use this for Recipient URL and Destination URL" is ticked

• On the next screen, choose the option "I'm an Okta customer adding an internal app", then click Finish to create the Sifflet app

c. Assign the Users to This App

The last step is to add all users that you want to grant access to Sifflet to this app. Depending on your internal organization, you can:

• create or use an existing group and then assign this group to the app
• assign the app directly to users

2- Configure the SSO in Sifflet

• In Okta, in the newly created Sifflet App, on the tab "Sign on", click on "View SAML Setup instruction"

• Then enter the following information on the Sifflet SSO page:
  • Identity Provider Single Sign-On URL
  • Identity Provider Issuer
  • X.509 Certificate

3- Test Your SSO

• You can now test your SSO by pressing the "Test" button on the bottom right of the page

• If successful, make sure to click "Save" to activate SSO.

The configuration is done.
On your next login, you will see the following login screen:

FAQ

After Clicking the Test Button in Sifflet, Why Do I See the Following Error?

Usually, it means that the current email address you are using in Sifflet is not an authorized user in Okta. Ask your Okta admin to add it to the Sifflet Application.

I Am a New Sifflet User and Do Not See the SSO Settings After Signing In with SSO

When you sign in with SSO as a new user, Sifflet creates an account with your email. By default, JIT-created users get System Viewer and Domain Viewer on the All domain, which don't allow you to see the SSO settings.
If you had already signed in before, you keep the same level of permissions.