How to Integrate MaintainX App Using SAML 2.0

This is a general guide on how to integrate MaintainX app using SAML 2.0.

• Security Assertion Markup Language (SAML) 2.0
• Single Sign-On (SSO)

Here is how to successfully integrate the MaintainX application with Okta:

• Go to the Okta Admin panel.
• Navigate to Applications > Applications.
• Click on Create App Integration > SAML 2.0.
• After naming the app and adding a logo > click Next.
  • Keep the page open for later to add the needed values.

Configuring SAML SSO on the MaintainX application:

• Go to the MaintainX Admin page.
• Click on the name (bottom left corner) > Customizations.
• Go to Single Sign-On (SSO) Self-Serve > set SSO Preferences.
• From this page, copy Entity ID, ACS URL, and Start URL.

 
Finishing app integration on Okta:

• Getting back to Okta, paste the:
  • ACS URL copied into Single sign-on URL. Make sure to leave "Use this" for "Recipient URL" and "Destination URL" checked.
  • Entity ID copied into Audience URI (SP Entity ID).
  • Start URL copied into Default RelayState.
• Add the following 3 attributes to the Attribute Statements section.
  • Name: email > Value: user.email
  • Name: firstName > Value: user.firstName
  • Name: lastName > Value: user.lastName
• Click Next and finish the Okta app integration.

Wrapping up MaintainX SSO config:

• Now that the Okta app is ready, go to the Sign On tab and click on More details. Then, copy the Issuer URL and the Sign On URL from there.

• Go back to the MaintainX SSO config page and paste the:
  • Issuer URL into Issuer URI.
  • Sign On URL into Single Sign-On (SSO) URL.
  • Sign ON URL into Destination.
• Download the certificate from the Okta app and upload it on the MaintainX SSO config page.
• The last part is to add the domains subject to SSO. These domains will be redirected to Okta for authentication.
• Optional: Configure a default role for user authentication through SSO. If a user already has a role, it will not be changed. This option is for users authenticating for the first time or if they do not have a role already.
• Click Update and test SSO.