# Okta

Go into your **Okta admin console** (it should look like this: `https://<your_url>.okta.com/admin/dashboard`)

1. In the sidebar menu, click on **Applications > Applications**&#x20;

   <figure><img src="https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2FAYesqWLkeQDiWw640Ij9%2FScreenshot.png?alt=media&#x26;token=89f99fe4-a81e-4e73-81c8-c833303ce9bd" alt=""><figcaption></figcaption></figure>
2. Click now on **Create App Integration**

   <figure><img src="https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2FdSdR1MRDxoeRULPhYJhj%2FScreenshot(1).png?alt=media&#x26;token=c4634784-ed28-4b6a-85ef-4b7464090149" alt=""><figcaption></figcaption></figure>
3. Select **SAML 2.0** and click on **Next**&#x20;

   <figure><img src="https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2FweUhSro71mwRYB0tbvgy%2FScreenshot(2).png?alt=media&#x26;token=bdc5f3c9-bfb7-4b34-8c98-2e94da9520ef" alt=""><figcaption></figcaption></figure>
4. Choose an **App name** and click on **Next**&#x20;

   <figure><img src="https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2FV7cXJV3E2ptwldQ0LQHK%2FScreenshot(3).png?alt=media&#x26;token=b7346c58-f0d4-4b47-b69a-290071b0bb01" alt=""><figcaption></figcaption></figure>
5. Add the **Single sign-on** **URL**: `<base_url>/api/accounts/saml/0/acs/`  (for example with localhost: `https://localhost:8443/api/accounts/saml/0/acs/`) (see screenshot below)
6. Add the **Audience URI (**<mark style="color:purple;">**SP Entity ID**</mark>**),** it has to be the same than <mark style="color:purple;">**SP Entity ID**</mark> in CISO Assistant (see screenshot below)
7. Choose **Email** as the **Application username**&#x20;

   <figure><img src="https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2F4Du76vTZapbBlhb75HM5%2FScreenshot(4).png?alt=media&#x26;token=e58e02af-21ab-4f17-a750-25a4cfa6200d" alt=""><figcaption></figcaption></figure>
8. Add **Attribute Statements**

   * `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname` for user's first name
   * `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname` for user's last name&#x20;

   <figure><img src="https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2F1MoE2mNEngXH5Uxh7HiL%2FScreenshot(5).png?alt=media&#x26;token=0a69edde-338c-48e1-b2c6-85ffec659616" alt=""><figcaption></figcaption></figure>
9. Click on **Next** and fill in the **Feedback** page as you wish then click on **Finish**&#x20;

   <figure><img src="https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2FwAxCOWH5I62vwYUuYccR%2FScreenshot(6).png?alt=media&#x26;token=f045c8a4-af09-4e74-a50e-084017825488" alt=""><figcaption></figcaption></figure>

   <figure><img src="https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2FfyEIIB8gv7l4plELSWYm%2FScreenshot(7).png?alt=media&#x26;token=48c83acf-5ca6-44e7-a448-957440b99354" alt=""><figcaption></figcaption></figure>
10. In the **Settings** box inside **SAML 2.0:**

    * Copy  the <mark style="color:purple;">**Metadata URL**</mark> and paste it into the <mark style="color:purple;">**Metadata URL**</mark> field in CISO Assistant
    * Copy the **Issuer** url and paste it into the <mark style="color:purple;">**IdP Entity ID**</mark> field in CISO Assistant

    <figure><img src="https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2FawwU2wsQIx4AvIDxbew1%2FScreenshot(8).png?alt=media&#x26;token=a04a085a-32b1-484a-8c37-384c2438c8c1" alt=""><figcaption></figcaption></figure>
11. Go to the **Assignments** tab&#x20;

    <figure><img src="https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2FhrgmtuD2JoleiXxjPHbM%2FScreenshot(9).png?alt=media&#x26;token=c9cf59b1-6e31-490b-b30f-e6670dce8a66" alt=""><figcaption></figcaption></figure>
12. Click on **Assign** and choose whether you want to assign users or specific groups&#x20;

    <figure><img src="https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2F3MIUKjgpmo09QPMv0tu8%2FScreenshot(10).png?alt=media&#x26;token=760643ee-56e0-4a86-a07b-c2e425bfea27" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %} <mark style="color:orange;">Add a user in your application doesn't automatically create the user on CISO Assistant</mark>
{% endhint %}

You can now [configure CISO Assistant](https://intuitem.gitbook.io/ciso-assistant/features-highlights/sso#configure-ciso-assistant-with-saml) with the <mark style="color:purple;">**3 parameters**</mark> you've retrieved.
