Validate an Okta SAML Response Using the Salesforce SAML Validator

Administrators can validate a Security Assertion Markup Language (SAML) assertion against the SAML Assertion Validator in Salesforce by capturing the SAML response during an authentication flow. A SAML tracing tool extracts the response from Okta, which administrators then paste into the Salesforce validator. This process verifies the Single Sign-On (SSO) configuration and identifies potential authentication failures.

• Okta Classic Engine
• Okta Identity Engine (OIE)
• Salesforce
• Security Assertion Markup Language (SAML) 2.0
• Single Sign-On (SSO)

What are the steps to validate a SAML response using the Salesforce SAML Validator?

Capture the SAML response using a SAML tracing tool during an authentication flow and paste the extracted response into the Salesforce SAML Assertion Validator to verify the configuration.

1. Install a SAML tracing tool on the browser.
   NOTE: SAML Tracer is an example of a tool that can be used for this purpose. Organizations should use a tool that best fits their internal guidelines for these types of tools.
2. Open the SAML tracing tool and initiate a SAML request for an Identity Provider (IdP)-initiated or Service Provider (SP)-initiated flow for Salesforce.
3. Review the SAML tracing tool window and select the SAML request sent from the application to Okta.
4. Navigate to the SAML tab and copy the SAML Response.

 

5. Paste the SAML Response into the SAML Assertion validator box in Salesforce by navigating to Admin console > Security Controls > Single Sign On Settings > SAML Assertion validator.