Tipalti Single Sign-On (SSO) may fail when configuring the SAML response audience field with the Okta application's Sign-on URL instead of the correct value.
 

This article explains the necessary configuration for setting up Single Sign-On (SSO) with the Tipalti application.

• Tipalti
• Single Sign-On (SSO)
• Security Assertion Markup Language (SAML)

The screenshot from the Tipalti SSO setup instructions displays the wrong example value.

The Tipalti application's SAML response audience field must contain the Okta application's Issuer/EntityID value.

Do not use the Okta application's Sign on URL for this field.

1. Locate the Issuer/EntityID value using one of the following methods:

   1. View the setup instructions provided by Okta.

   2. Navigate to the Okta application's Sign On tab and select More Details to find the value.

2. Enter the correct Issuer/EntityID into the SAML response audience field within the Tipalti application.

Related References

• Tipalti SSO setup instructions