Configuring Okta Single Sign-On Integration with SAML
This guide shows you how to configure Okta and Acunetix Premium+ for Single Sign-On.
Okta is an identity and access management platform. Its Single Sign-On (SSO) solution allows users to log into a variety of systems using one centralized process.
Single Sign-On Fields
This table lists and explains the Single Sign-On fields.
Field | Description |
SAML 2.0 Service URL | This is the Consumer URL value (also called the SSO Endpoint or Recipient URL). |
Identifier | This is the base URL of Acunetix product |
SSO Provider | This is the drop-down to choose your SSO provider. |
SAML 2.0 Endpoint | This is the URL from your IdP's SSO Endpoint field. |
IdP Identifier | This is the SAML identity provider’s Identifier value. |
X.509 Certificate | This is the X.509 certificate value. |
How to configure Okta with SAML
There are two parts to this procedure:
- Part 1: Add an application to Okta
- Part 2: Add users to the application on Okta
How to add an application to Okta
- Log in to Okta.
- From the Admin Console under the main menu, go to Applications > Applications > Create App Integration.
- From the Create a new app integration dialog, select SAML 2.0. Then click Next.
- On the Create SAML Integration page, enter a name in the App name field. (You can enter any name you want. For this example, we use Acunetix.)
- Select Next.
- Open a new tab and log in to Acunetix.
- From the Acunetix menu, select Settings > Users & Access > SSO.
- Turn on the Enable SSO toggle.
- Select Okta from the SSO Provider drop-down list.
- Copy the SAML 2.0 Service URL. Switch to the Okta tab and paste the URL into the Single Sign-on URL field.
- Return to the Acunetix tab and copy the Identifier URL. Switch to the Okta tab and paste the URL into the Audience URI (SP Entity ID) field.
- In the Okta tab, add the following FirstName field in the Attribute Statements. Then select Next. The Feedback tab is displayed.
- Click Finish.
- From Okta's main menu, select Applications > Acunetix.
- Select the Sign On tab and scroll down to View SAML Setup Instructions. Okta opens a new tab.
- From the new tab, copy the URL from the Identity Provider Issuer. Then switch to the Acunetix tab and paste the URL to the IdP Identifier field.
- In the Okta tab, copy the URL from the Identity Provider Single Sign-On URL. Then switch to the Acunetix tab and paste the URL to the SAML 2.0 Endpoint field.
- In the Okta tab, copy the content from the X.509 Certificate field. Then switch to the Acunetix tab and paste the URL to the X.509 Certificate field.
- In Acunetix, if you select Require encrypted assertions, do one of the following:
- Select Generate a new certificate for me; OR
- Select I have an existing certificate, then upload your certificate and enter the certificate password.
IMPORTANT: Selecting Require encrypted assertions will require applying additional settings in Okta. For instructions, refer to How to configure encrypted assertions in Okta. |
- From the Acunetix SSO Exemptions drop-down, you can select specific users to exempt them from SSO. Doing this means the selected users can log in to Acunetix via password.
- Click Save.
Acunetix informs you that the SSO configuration is saved.
How to add users to the application on Okta
- Log in to Okta.
- From the main menu, go to Directory > People > Add Person.
- On the Add Person dialog, fill out the form.
- Select Save.
- From the main menu, go to Applications > Applications.
- Select Acunetix from the list.
- Select Assign > Assign to People.
- From the Assign Acunetix to People dialog, select Assign next to the person you want to add.
- Select Save and Go Back.
- Click Done.
Your assigned users can now log in to Acunetix via Okta.
How to configure encrypted assertions in Okta
- Log in to Okta.
- From the main menu, go to Applications > Acunetix.
- Select the General tab and scroll down to the SAML Settings section. Click Edit.
- Click Next, then Show Advanced Settings.
- Use the drop-down next to Assertion Encryption to select Encrypted.
- Click Browse Files next to Encryption Certificate and upload your Acunetix certificate from Step 19 above.