When viewing SAML Protocol Settings in the Configuration Document for a SAML application, administrators may encounter the message:

Sign in to Okta Admin app to have this variable generated for you.

or

Sign into the Okta Admin Dashboard to generate this variable.

This article explains the cause of this issue and provides steps to resolve it.
 

• Secure Assertion Markup Language (SAML)
• SAML Setup Instructions
• SAML Protocol Settings
• SAML Variables
• Okta Classic Engine

If SAML Setup Instructions for applications are accessed from external sites (for example, Google Search) instead of the Okta admin console, the SAML Protocol variables unique to each application will not be generated. Additionally, this issue may occur when using an incognito window or if the browser has blocked third-party cookies.

To generate SAML Protocol Variables, review the video below or follow these steps.




Log in to the Okta Admin console and follow one of these two methods:

​ Method 1 - During the Initial app setup:

1. Log in to the Okta Admin console.

2. Navigate to the Applications tab.

3. Click Add Application and select the SAML 2.0 app type.

4. Follow the prompts to configure the application.

5. During the setup, in Step 2, click View Setup Instructions.

6. Copy the SAML Protocol variable and use it in the application.

Method 2 - After the application has been added:

1. Log in to the Okta Admin console.

2. Navigate to the Applications tab.

3. Select the SAML application from the list.

4. Click on the Sign On tab.

5. Click View Setup Instructions.

6. Copy the SAML Protocol variable and use it in the application.
    

If the issue persists despite following the previous steps, ensure that third-party cookies are not blocked in the browser. This can be done by adjusting the browser's settings or adding an exception for Okta in the browser's privacy settings.