Configuring Vouched SSO with Okta

Configure Okta as your SAML 2.0 identity provider for Vouched SSO using your Vouched SP metadata values.


Configure Okta as your SAML 2.0 identity provider (IdP) for Vouched SSO.

This guide walks through configuring Okta for Vouched SSO.

Prerequisites

Before you begin:

  • Complete Steps 1–2 in the SSO / SAML Configuration guide.
  • Copy your Vouched SP metadata values from the IdP Configuration section.
  • Sign in to your Okta Admin Console with permission to create applications.

Configure Okta for Vouched SSO

1. Create a SAML 2.0 application in Okta

  1. Log in to your Okta Admin Console.
  2. Navigate to Applications > Applications.
  3. Click Create App Integration.
  4. Select SAML 2.0.
  5. Click Next.
  6. Give the app a name, such as Vouched.
  7. Click Next.

2. Configure SAML settings

In the Configure SAML step, enter the following values from your Vouched IdP Configuration section:

Okta fieldValue
Single sign-on URLUse the ACS URL from Vouched
Audience URI (SP Entity ID)Use the Entity ID from Vouched
Name ID formatSelect EmailAddress
Application usernameSet to Email

3. Add attribute statements

Scroll down to the Attribute Statements section and add these mappings:

NameValue
firstNameuser.firstName
lastNameuser.lastName

After you add the mappings, click Next, then Finish to save the application.

4. Retrieve your Okta metadata URL

  1. Open the newly created application.
  2. Go to the Sign On tab.
  3. Scroll down to the SAML Signing Certificates section.
  4. Click the Identity Provider metadata link.
  5. Copy the URL from your browser's address bar. This is your Metadata URL.
  6. Paste this URL into the Metadata URL field in Vouched.
  7. Click Save.

5. Assign users

In the Assignments tab of your Okta application, assign the users or groups who should have access to Vouched through SSO.

Need help?

Contact Vouched support with a description of the issue and the step where the issue occurs.