SAML integration with Okta

This guide outlines the process of integrating Okta with ClouDNS using SAML 2.0. 

Steps

Step 1: Create a New SAML Application in Okta

1. Log into the Okta Admin Dashboard:
   Navigate to Applications > Applications.
2. Create a New App Integration:
   Click on Create App Integration. Select SAML 2.0 as the sign-on method.
3. Configure Application Name:
   Enter ClouDNS as the App name. Click Next to proceed.
4. Configure SSO Settings:
   Enter https://www.cloudns.net in both the Single sign-on URL and Audience URI (SP Entity ID) fields. Click Next to continue.
5. App Configuration:
   Select the option: This is an internal app that we have created. Click Finish to complete the app creation.

Step 2: Configure SAML Settings in Okta

1. Access App Settings:
   After creating the app, navigate to the Sign On tab in the app settings.
2. Download the Signing Certificate:
   Under the SAML 2.0 section in the Settings tab, click on More details. Download the Signing Certificate. Copy the Issuer URL.

Step 3: Configure ClouDNS for SSO Authentication

1. Log into ClouDNS:
   Open your profile settings on ClouDNS and navigate to the SSO Authentication page: https://www.cloudns.net/profile/sub-page/saml/.
2. Add New Provider:
   Click on Add new provider. Name the provider Okta. Paste the copied Issuer URL into the Entity ID section.
3. Upload the Signing Certificate:
   Open the Signing Certificate in a text editor. Copy the entire content and paste it into the Certificate textbox. Click Add to save the provider.
4. Copy the ACS URL:
   After adding the SAML provider, an ACS URL will be generated. Copy this URL.

Step 4: Finalize SAML Settings in Okta

1. Access Okta App Settings:
   Go back to the Okta admin dashboard and click on the General tab under the ClouDNS app settings.
2. Edit SAML Settings:
   Click on the Edit link in the SAML Settings section. Ensure the App Name remains unchanged and click Next.
3. Configure SAML:
   In the Configure SAML section, paste the ACS URL you copied earlier in the Single sign-on URL field. Ensure that the checkbox for Use this for Recipient URL and Destination URL is marked. Make sure the Audience URI (SP Entity ID) remains as https://www.cloudns.net/.
4. Set Username Format:
   In the Application username field, select Email prefix. Click Next to proceed.
5. Finish Configuration:
   On the next page, click Finish to complete the setup.

Step 5: Assign Users to the Application

1. Assign Users:
   Go to the Assignments tab in the Okta dashboard. Assign users to the newly created ClouDNS app.

Step 6: Test the Integration

1. Test the Login:
   Log in through the End User Dashboard to verify that the SSO integration is working correctly.