Verify - Okta SSO Configuration Guide

This guide describes the overview of the typical steps required to configure Single Sign On (SSO) using Okta.

It is possible that such setups require company-specific steps that may not be covered by this description.

Please note that in order to complete this process, the person that is setting up the connection on the customer’s side needs to:

• be a Tenant Administrator in Verify,

• have access to their company’s Okta dashboard.

Please follow these steps for a base setup:

1. Please log in to Verify.

2. Navigate to My Account

To access My Account, click your account name at the top-right corner of the screen, at any point while logged into Verify.

3. Go to the Single Sign-On details, which can be set under the Security tab within My Team.

4. Set the Connection Name in the Verify App:

5. Login to Okta, which is set up on the customer’s side.

6. Navigate to Applications → Applications.

7. Select Create App Integration.

Please note that Verify does not have a built-in App in the Okta catalog.

8. Select SAML 2.0.

9. Modify App Settings as needed.

Typical setup is similar to the one illustrated above.

10. Edit SAML Settings to include the following from the Verify App:

    1. Reply URL - which is called Single Sign-on URL in Okta,

    2. Entity ID - which is called Audience URL in Okta,

    3. Name ID format.

11. Navigate to Attribute Statements.

12. Add the following items:

    1. Name should be email,

    2. Name format should be Unspecified,

    3. Value should indicate the email address format.

This value can be set differently case by case, some indicating specific technical address, some others opting for a general user.email value, as visible above.

13. Skip the Feedback step and Click Finish.

14. Navigate to Directory → Profile Editor.

15. Find the newly created Verify app in the application list.

16. Click Add Attribute.

17. Enter the following:

    1. Display Name should be set to email,

    2. Variable Name should be set to email,

    3. Data Type should be set to String,

18. Click Save.

19. Select Mappings.

20. Choose Okta User to InsertAppName and then click on the dropdown menu and select email.

21. Click Save Mappings.

22. Click Apply updated now.

23. Click Mappings.

24. Ensure the mapping contains a green arrow icon → it indicates Apply mapping on user create and update.

Please make sure that the mapping value is the same as the attribute value in step 9C.

25. Click on Save and then on Apply updates now.

26. Return to Verify App and fill in the following items:

    1. Sign In Page

    2. Sign Out Page

    3. Email Mapping

    4. Certificate

    5. Advanced Settings (if needed)

This description is based on SSO configuration examples, parameters may differ by company, sometimes requiring additional steps and special settings to be applied for proper operation. Please reach out to us through our support channels for any enquiries about the process.