Add an Okta SAML application

During this task we will create an Okta SAML application.

Before you begin

Determine the values for:

Field Description
Single sign on URL SAML Post URL location.
Often referred to as the SAML Assertion Consumer Service (ACS) URL for the target application.
Audience URI The application defined unique identifier that is the intended audience of the SAML assertion. Most often referred to as the SP Entity ID of your application.

To create a direct access application in your Okta tenant:

  1. Sign in to your Okta tenant as an administrator.
  2. In the Admin Console, navigate to Applications > Applications.
  3. Click Create App Integration.
  4. In the Create a new app integration dialog, choose SAML 2.0 and click Next.
  5. Enter an App name such as Direct access to <my app> and click Next.
  6. In Configure SAML step, in the SAML Settings section, enter values for:
    Single sign on URL
    Audience URISAMLShowcase
  7. Click Next.
  8. In the last page, select I'm an Okta customer adding an internal app, and click Finish.

Determine required SAML application URL:

Later we will need to create a bookmark Okta application which will require a specific URL to the SAML application. It's convenient to determine this URL now.

  1. Click the name of the newly added application.
  2. Select the Sign On tab.
  3. In the SAML 2.0 section of the Settings page, click Identity Provider metadata.
  4. Select and copy the displayed metadata. This metadata will be provided to the SAML application to generate the required URL.

    The following steps vary based on the SAML application. See the application providers documentation for obtaining the appropriate URL.

  5. Navigate to the SAML application. In this example, navigate to https://SAMLtest.examplecom > IDP initiated SSO
  6. Paste the provided metadata as required by the SAML application.
    In this example, paste the metadata into the metadata content field and click SUBMIT XML.
  7. Copy the provided URL and save for use with the bookmark application.