Prerequisites
- Access to your Okta admin dashboard.
-
The following details from Doozy:
- Entity ID:
https://doozy.live
- ACS URL:
https://doozy.live/__/auth/handler
- Entity ID:
Step 1: Create a New SAML App in Okta
- Log in to your Okta admin dashboard.
- Navigate to Applications > Applications.
- Click Create App Integration.
- Select SAML 2.0 and click Next.
Step 2: Configure SAML Settings
In the General Settings:- App name: Enter a name for your app, e.g., “Doozy”.
- (Optional) Upload a logo and set visibility options.
SAML Settings
In the SAML Settings:- Single sign-on URL:
- URL: Enter
https://doozy.live/__/auth/handler
- Request Binding: Ensure “HTTP-POST” is selected.
- URL: Enter
- Audience URI (SP Entity ID):
- URI: Enter
https://doozy.live
- URI: Enter
Attribute Statements (Optional)
- Click Add Another to add a new attribute statement.
- Name:
Name ID
- Name format:
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
- Value:
user.email
- Name:
Step 3: Configure Feedback
- Choose the option that best describes your needs and click Finish.
Step 4: Assign People to the Application
- Click Assignments and assign users or groups to the Doozy app.
Step 5: Retrieve Okta SAML Details
Once the application is created, you’ll need to retrieve the following details from Okta:- Entity ID: Found under the “Sign On” tab. Example:
- SSO URL: Also found under the “Sign On” tab. Example:
- Certificate: Download the certificate from the “Sign On” tab under “View SAML setup instructions.”
Step 6: Configure SAML in Doozy
- Navigate to the Doozy Security Settings.
- In the SAML configuration section, enter the following values:
- Entity ID:
https://doozy.live
- ACS URL:
https://doozy.live/__/auth/handler
- Okta Entity ID: (Use the Entity ID retrieved from Okta)
- SSO URL: (Use the SSO URL retrieved from Okta)
- Certificate: (Paste the content of the certificate retrieved from Okta)\
- Domains: Add the domains that users can log in with. This restricts access to users with email addresses from these domains.
- Entity ID:
- Map the Name ID to Email.
Step 7: Test the Integration
- Log out of Doozy.
- Try to log in using Okta SSO to verify the configuration.
If you encounter any issues, please refer to Okta’s documentation or contact support.