Set up SSO with Okta SAML

You can create an Okta SAML app integration to allow single sign-on (SSO) for Triton Digital applications.

Also see:

• Set up Single Sign On (SSO)

• Create an app integration | Okta Developer

Step 1: Contact Triton Digital

To get started, see Set up Single Sign On (SSO).

Triton Digital will provide you with a configuration variable that you will use to configure an Okta app integration:

<connection-name> = <customer-name>-saml

Example: For the publisher Blork Media, <connection-name> would be blork-media-saml . Your connection name will be different.

Step 2: Configure an Okta SAML App Integration

Follow Okta guidelines for creating and configuring a SAML app integration. See Create an app integration | Okta Developer.

• Sign-in method: Select SAML 2.0.

• Application Label: Enter “TritonDigital SAML” (without quotes).

• Single Sign On, Recipient URL, and Destination URL: enter
  https://id.tritondigital.com/login/callback?connection=<connection-name> where <connection-name> is the value of the variable described above.

• Audience restriction: Enter urn:auth0:triton-digital-prod:<connection-name, where <connection-name> is described above.

• Name ID Format: Select EmailAddress

• Generate and download a SAML signing certificate.

• Copy and save the metadata URL.

• Assign users to the Okta app integration.

Step 3: Send SAML Information to Triton Digital

Send the following information to your Triton Solutions Specialist:

• The application’s SAML certificate, in binary format.

• The login URL.

• The email domains associated with the Okta app integration.