Configure Okta as an IdP in the Cloud Identity Engine (Custom)

1. Log in to the Okta Admin Console and select ApplicationsApplications.

2. Click Create App Integration.

3. Select SAML 2.0 as the sign-on method then click Next.

4. Enter an App name then click Next.

5. Copy the SP Metadata information from the Cloud Identity Engine and enter it in the Okta Admin Console as described in the following table:

   Copy from Cloud Identity Engine	Enter in Okta Admin Console
   Copy the Assertion Consumer Service URL in step 3.	Enter the URL as the Single sign on URL.
   Copy the Entity ID in step 3.	Enter it as the Audience URI (SP Entity ID).

6. Specify the Name ID format and optionally the Application username.

   You must configure at least one SAML attribute that contains identification information for the user (usually the username attribute) for the attributes to display in the Cloud Identity Engine. To configure administrator access, you must also enter values for the accessdomain attribute and for the adminrole attribute that match the values on the firewall.

7. Click Finish to save the configuration.