Skip to main content
This page configures SAML 2.0 authentication between Okta and the Syteca Management Tool. See SSO integration overview for what SSO integration does and the Management Tool settings shared across every provider.

​
Prerequisites

Okta SSO requires OpenSSL to generate a signing certificate before configuration begins.

​
Generate the certificate

1

Generate a self-signed x509 certificate

Open a Windows command prompt or Linux terminal and run:
Answer the certificate subject prompts (country, organization, common name, and so on) — these can be left blank where not required.
2

Export a PKCS12 certificate for Syteca

This produces cert.pfx, which is uploaded to the Management Tool later. The cert.pem file (or its public key) is uploaded to Okta.

​
Configure Okta

1

Create a SAML app integration

In Okta, go to Applications → Applications, click Create App Integration, select SAML 2.0, and click Next.
2

Name the application

On General Settings, enter an App name and click Next.
3

Configure the SAML URLs

On Configure SAML, set both the Single sign on URL and Audience URI (SP Entity ID) to your Management Tool URL.
4

Configure advanced settings

Click Show Advanced Settings:
  • Upload the cert.pem x509 certificate in Signature Certificate.
  • Set Single Logout URL to your Management Tool URL.
Click Next.
5

Finish the integration

On Feedback, select I’m a software vendor and click Finish.
6

Download the identity provider metadata

On Applications → Application → <your application> → Sign On, scroll to SAML Signing Certificates, click the Actions menu next to SHA-2, and select View IdP metadata. Save the page as metadata.xml.
7

Assign users

On Applications → Application → <your application> → Assignments, select Assign → Assign to People, choose the users who should have SSO access, and click Done.

​
Configure the Management Tool

1

Open SSO Integration settings

Click Configuration at the top of the Management Tool, then select the SSO Integration tab.
2

Enter the issuer and upload the metadata

Set Issuer name to your Management Tool URL, and upload metadata.xml under Identity provider metadata (xml).
3

Upload the custom certificate

Select Custom certificate, upload cert.pfx, and enter the certificate’s export password.
4

Review the auto-create account setting

The Auto-create a Management Tool account for a new user on the first SSO login checkbox is selected by default. See SSO integration overview for what this controls.
5

Save and restart the Application Server

Click Save, then restart the EkranServer service in Windows Services to apply the change.
EkranServer is a literal system identifier, preserved verbatim from source.
SSO authentication is not currently supported in Multi-Tenant mode.

SSO integration overview

All supported SSO providers and shared Management Tool settings.

Azure SSO

Configure SSO through Azure instead.

ForgeRock SSO

Configure SSO through ForgeRock instead.

User management

Managing Management Tool user accounts and permissions.