Where can I find SSO Url and Audience URI as a tenant admin?

Loading

Skip to Navigation Skip to Main Content

Search

Search

Select Language

0D51Y00008FM12LSATOkta Classic EngineSingle Sign-OnAnswered2020-04-21T14:38:18.000Z2020-04-14T11:47:20.000Z2020-04-21T14:38:18.000Z

PierreR.38503 (Customer) asked a question.

April 14, 2020 at 11:47 AM

Where can I find SSO Url and Audience URI as a tenant admin?

Hi,

here's my following setup, I have 2 Okta tenants:

Okta Tenant A (identity provider)
Okta Tenant B (service provider)

I would like to create an Okta application in Tenant B that supports SSO for users in Tenant A through SAML.

The setup in Tenant A seems straightforward:

Classic UI > Applications > Create a New Application Integration > Web SAML 2.0

The form request the following fields:

Single sign on URL
Audience URI (SP Entity ID)

Both of those values should come from the service provider (Okta application in Tenant B) but I can't seem to find in which admin page they are displayed in Tenant B.

Moreover, do I need to create the Okta application in Tenant B in a specific way to allow SAML assertions ?

Thanks for your help.

Kind regards,

Top Rated Answers

PierreR.38503 (Customer)
6 years ago
Hi Alexandru,

thank you for your reply. The Org2Org app comes with a few functionalities that I do not seek to use, which is why I prefer using a bare-bone SAML application.

I did find the answer to my question in the meantime. I'll share it here to be visible to the community:
In Okta Tenant A (idp), navigate to applications, create a SAML app with placeholder values for Single sign on URL and Audience URI (SP Entity ID). Once created, click on the metadata link or setup instructions, and:
download the certificate
copy Identity Provider Single Sign-On URL
copy Identity Provider Issuer
In Okta Tenant B (sp), navigate to identity providers, create an SAML identity providers, fill in the following fields using the previously saved values:
IdP Signature Certificate
dP Single Sign-On URL
IdP Issuer URI
Once created, copy the following generated properties: Single sign on URL and Audience URI.
In Okta Tenant A (idp), navigate to the newly created SAML app and correct the two placeholder values with the aforementioned properties
Expand Post
Selected as Best

All Answers

alexandru.moraru1.5000675512268237E12 (Okta, Inc.)
6 years ago
Hi Pierre,

For this type of setup the best course of action is to integrate Okta's Org2Org app. This will allow the desired SAML auth from one tenant to another.
More details about this you'll find in the below article:
https://saml-doc.okta.com/SAML_Docs/Configure-SAML-2.0-for-Org2Org.html

Thank You,

Alexandru Moraru
Technical Support Engineer
Okta Global Customer Care
Expand Post
PierreR.38503 (Customer)
6 years ago
Hi Alexandru,

thank you for your reply. The Org2Org app comes with a few functionalities that I do not seek to use, which is why I prefer using a bare-bone SAML application.

I did find the answer to my question in the meantime. I'll share it here to be visible to the community:
In Okta Tenant A (idp), navigate to applications, create a SAML app with placeholder values for Single sign on URL and Audience URI (SP Entity ID). Once created, click on the metadata link or setup instructions, and:
download the certificate
copy Identity Provider Single Sign-On URL
copy Identity Provider Issuer
In Okta Tenant B (sp), navigate to identity providers, create an SAML identity providers, fill in the following fields using the previously saved values:
IdP Signature Certificate
dP Single Sign-On URL
IdP Issuer URI
Once created, copy the following generated properties: Single sign on URL and Audience URI.
In Okta Tenant A (idp), navigate to the newly created SAML app and correct the two placeholder values with the aforementioned properties
Expand Post
Selected as Best

This question is closed.

Recommended content

Forum

Where to find URL SSO Key?

Forum

single sign on URL and Audience URI

Forum

Where to find preview url?

Forum

Help in finding Sign-in URL and where to configure Sign-On URL

Loading

Where can I find SSO Url and Audience URI as a tenant admin?