Okta is a cloud-based identity and access platform that allows organizations to securely manage user access to various applications and services. It enables the simplification of user authentication and authorization processes, as well as enhances security by ensuring that users have the right level of access to systems and data.

Upon Okta integration, you will be able to:

• Use single sign-on (SSO). Okta enables users to access multiple applications with a single set of login credentials.
• Configure multi-factor authentication (MFA). Okta offers MFA options, such as biometric verification or one-time passcodes, to add an extra layer of security.
• Secure data usage. Okta provides tools for monitoring user activity and detecting suspicious behaviour.
• Centralize access management. Okta provides a platform for managing user access to multiple applications, making it easier to control permissions and security policies across the organization.

Get started

To integrate with Okta, you need to start with setting up your Okta account, following the steps below. After setting it up, you will have all the information necessary to complete the integration from our side.

In Okta

In the Okta Dashboard, you need to create and set up your integration:

1. Create a new app integration:
   1. In the OKTA Dashboard, go to Applications and click Create App Integration.
   2. When a pop-up window appears, select SAML 2.0 and proceed to the next step.
2. Edit SAML integration:
   1. In the General Setting tab, enter the name of the integration.
   2. Navigate to Configure SAML:
      1. Within the General section, fill in Single sign-on with https://api.sumsub.com/resources/auth/sso/acs.
      2. In Audience URI (SP Entity ID), enter the following: https://api.sumsub.com/resources/auth/sso/metadata.
      3. Fill in Attribute Statements with your given name, last name, and email address. These fields are necessary to complete since our system will use this data to pull up information about a particular user.
      4. In Group Attribute Statements, specify the name of the group attribute.
3. View created integration:
   1. Go back to Applications and select the integration from the list.
   2. Navigate to the Sign On tab to view the Metadata details and Certificate fingerprint data.
   3. Use this data to fill the fields in the Sumsub Dashboard.

In Sumsub

Once your integration is created and configured, transfer the data to the Sumsub Dashboard to complete integration with Okta:

1. In the Dashboard, open the SSO Login page.
2. Use the corporate email domain in the Domain field.
3. For IdP Entity ID, go to the Metadata details in Okta and paste the data from the Issuer field.
4. You can leave Name Id Format empty. For more information about this field, see this section.
5. For SSO service URL, use data from the Sign on URL field in Okta.
6. For Logout service URL, use data from the Sign on URL field in Okta.
7. From Metadata details in your Okta account, copy Signing Certificate and paste it in the Certificate field.

8. Fill in Attributes with the data from Attribute Statements in the same format as you specified them in Okta.
9. Set up Groups:
   1. Fill in the Groups Attribute field with the group attribute name from Okta.
   2. Click Add group to create a group within Sumsub.
   3. Use IdP Group name to give a name to your group.
   4. Select a role that will be associated with the group.
10. When finished, click Test and save.