This article clarifies that enabling Claims Sharing within the Okta Org2Org application integration automatically encrypts the SAML responses exchanged between Okta organizations. This enhancement provides an additional layer of security for shared user data.
- Org2Org application
- Security Assertion Markup Language (SAML)
- Custom SAML app integration between two Okta orgs
- Claims Sharing
- Okta Identity Engine (OIE)
Enabling Claims Sharing enhances the security of data exchanged between Okta organizations. When this feature is active, the SAML response, which contains shared user attributes and session details, is automatically encrypted. This encryption uses a publicly available key from the Service Provider (SP) organization, ensuring that the sensitive information remains protected during transmission.
Since the encryption of SAML responses when Claims Sharing is enabled is an intentional security feature, there is no action to take to disable it. This behavior is designed to enhance the security of data exchanged between Okta organizations.
