Okta SAML Setup

This article explains how to: 

• Create an EliseAI application in Okta using SAML.
• Obtain the SSO Login URL and X.509 Certificate to share with EliseAI. 

1. On the Okta Dashboard, navigate to the Applications page in the left sidebar. 

   

2. Click Create App Integration.
3. In the pop up, select SAML 2.0 as the sign-in method and click Next.
4. Under General Settings, enter "EliseAI" as the App name.
5. Under SAML Settings, input the following using the Connection Name we provided:
   • Single sign-on URL: https://login.meetelise.com/login/callback?connection=<ConnectionName>
     • Be sure to check the box underneath that reads "Use this for Recipient URL and Destination URL"
   • Audience URI (SP Entity ID): urn:auth0:meetelise:ConnectionName
6. Under Attribute Statements, input the following (the Name format for each should be "Unspecified"):
   • Name = given_name; Value = user.firstName
   • Name = family_name; Value = user.lastName
   • Name = email; Value = user.email
   • Name = title; Value = user.title
   • Name = department; Value = user.department
   • Name = location; Value = user.location
     • The location should be the Community name you're assigned to in the AI Portal.
   • Note that although it says "optional", this page must be filled out.
7. Under Group Attribute Statements, input the following:
   • Name = groups
   • Name format = Unspecified
   • Filter = Matches regex
8. Press Next.
9. Click the Sign On tab near the top of the page.
10. At the bottom of the right sidebar, click View SAML setup instructions.
11. Send us two pieces of information from the page that opens:
    • Copy the Identity Provider Single Sign-On URL.
    • Download the X.509 Certificate.
12. Assign to the users who will be using the EliseAI application.
13. Enter the information found in steps 5 and 11 to the SSO Settings page in AI Portal.