SAML SSO Configuration with Okta

Security is now called Authentication Providers. All the relevant text and images on this page have been updated to reflect this change.

This procedure describes how to configure Artifactory SAML SSO with Okta.

To use SAML SSO with Okta:

Log in to Okta with administrator privileges.
In the Administration module, select Add Application | Create New App | SAML 2.0.
Enter the App name:<desired_app_name>, and click Next.
In the SAML Settings enter the following:
- Single Sign-On URL for Artifactory 6.X version.
```
https://${ARTIFACTORY_URL}/artifactory/webapp/saml/loginResponse
```
  Example
```
https://yourcompany.jfrog.io/artifactory/webapp/saml/loginResponse
```
- Single Sign-On URL for Artifactory 7.x version.
```
https://${ARTIFACTORY_URL}/ui/api/v1/auth/saml/loginResponse
```
  Example
```
https://yourcompany.jfrog.io/ui/api/v1/auth/saml/loginResponse
```
- Audience URI (SP Entity ID).
```
https://${ARTIFACTORY_URL}
```
  Example
```
https://yourcompany.jfrog.io/
```
- Name ID Format: Unspecified
- Application username: Okta username
  Note
  You can log into Artifactory with Okta by using the username of a user's email address (i.e. "admin" from "admin@ company.com"). Choose Custom instead of Okta username and add String.substringBefore(user.email, "@") into the Custom Rule.
Click Next and then click Finish. A SAML 2.0 frame is displayed under the Settings frame.
Click View Setup Instructions.
Copy the data from the text boxes and paste them in Artifactory's SAML SSO settings.

To use SAML SSO with Artifactory.

Okta	Artifactory
Identity Provider Single Sign-On URL	SAML Login URL
https://<Account_Name>. okta.com	SAML Logout URL
Identity Provider Issuer	SAML Service Provider Name
X.509 Certificate	SAML Certificate

Okta users need to be assigned with permissions for Artifactory. For more information see Group Sync (for Artifactory versions 5.3.0 and above.