Okta

This guide covers IdP-initiated login only. For SP-initiated login, follow the generic SAML setup and no provider-specific configuration is required.

Creating the Application

1. In Okta, go to Applications > Create App Integration.
2. Select SAML 2.0.
3. Enter the application name (for example, Deque Axe).
4. On the Configure SAML page, enter the values Deque provided:
   • Single sign-on URL: The SSO URL from your Deque metadata
   • Audience URI: The Entity ID value (the one ending in /clients/<client name>, not the one ending in /endpoint)
5. Click Next.

Adding Attribute Statements

Attribute statements tell Okta which user properties to send to Deque. The first and last name attributes are optional but recommended — they are imported on first sign-in.

1. On the SAML 2.0 application page, go to the Attributes tab.
2. In the Attribute Statements section, select Show legacy configuration.
3. Add the following three attributes:

4. Click Save.

Set Name ID format to EmailAddress.

Assigning Users

1. In the application, go to the Assignments tab.
2. Assign the users and groups who should have access to this application.

Sending Metadata to Deque

1. In the application, go to the Sign On tab.
2. Under SAML Signing Certificates, select your certificate.
3. Download the metadata by selecting the Metadata details link. This opens an XML document.
4. Copy the URL from your browser's address bar (the metadata URL ending in .xml), or save the XML file and send it to helpdesk@deque.com.

Testing

1. In your Okta user profile, go to My Applications.
2. Select the Deque application you created.
3. Confirm you are redirected to Deque and arrive in the product.
4. Confirm your name and email address are correct on your Deque profile.

Your IdP-Initiated Start URL

After testing completes, send this URL to Deque:

1. In the application, go to General > App Embed Link.
2. Copy the URL.