Configure Single Sign-on (SSO) with Okta

Pronto supports SAML 2.0 Single Sign-On (SSO) authentication. This enables users to securely authenticate with multiple applications and websites by using one set of credentials. 

This article outlines a series of steps to do the following:

• Configure Pronto as an application in Okta 
• Add Users
• Configure SAML SSO in Pronto
• End-user workflow  

Pre-requisite

• Pronto users with Administrator privileges can configure Single Sign-On. 
• Collect your tenant-specific Pronto application details from Settings -> Single Sign-On page before configuring Okta 

Configure Pronto as an application in Okta 

1. Login to Okta with your admin credentials.
   
   
2. Click on the Admin button in the upper right corner.
   
   
3. Click on the Application tab to add Pronto as an application. 
   
   
4. Click on Applications on the left sub-navigation, followed by Create App Integration.
   
   
   
   
5. A pop-up appears “Create a New app Integration”. Select SAML 2.0 and click on Next.
   
   
   
   
6. Create a SAML Integration.
   
   In the General Setting tab, Enter the application name to uniquely identify Pronto application within Okta. Ex: Pronto - Acme.
   
   
   
   
7. In Configure SAML tab, enter details from your Pronto tenant
    
   Single sign-on URL -> This is obtained from Pronto Settings -> Authentication -> Single sign-on configuration page.
   
   Audience URI (SP Entity ID) -> This is obtained from Pronto Settings -> Single sign-on configuration page
   
   
   
   Once you get the SSO URL and the Audience URI from Pronto settings, go back to the OKTA configuration page and paste the details as shown below.
   
   
   
   
8. Once the details are entered, scroll down to the "Attribute Statements" section and enter the SAML attributes.
   
   Note: The following SAML Attribute are supported username, firstname, lastname
   
   
   
   
9. Scroll down on the page and click Next to continue.
   
   
10. On the Edit SAML Integration page, select the second option "I'm a software vendor. I'd like to integrate my app with Okta and click on Finish.
    
    
     
    
11. The newly added application (in this example: Pronto) will show up under the Applications Tab. The status of this application will be Active.
    
    

Add users

1. Click on Application on the left main navigation and click on the App that you created for Pronto authentication.
   
   
   
   
2. Click on the Assignments tab.
   
   
   
   
3. Click on Assign and select the options available based on your setup
   
   a) Assign to People
   b) Assign to Groups
   
   to enable OKTA SSO login method. If you do not see users listed, please add users and then add the user can be added. 
   
   

Configure SAML SSO in Pronto

1. Login to Pronto as an Administrator.
   
   
2. Navigate to Settings -> Authentication and click on Configure under Single Sign-On
   
   
   
   
3. On the SSO configuration page, enter the IDP metadata from the Okta app.
   
   
4. Use the information generated “How to Configure SAML 2.0 for AcmePronto Application” to complete the set-up on Pronto.
   
   Under Configure SAML, enter the IDP metadata and click on Save and verify to finish the setup.
   
   
   
   
5. Once successfully configured and saved, SSO functionality will be enabled and you will see a confirmation message to the bottom left of the screen.
   
    
   

End-user workflow  

1. Access the Pronto login page and click on the icon below the login button that reads "Single sign on".
   
   
   
   
   
   
2. Enter your email address and click on Login. You will be redirected to the OKTA sign in page. Enter your login credentials and click on Sign in. You should be logged in and should be able to see the Pronto Ecosystem page, if you are successfully logged in.
   
   

If you have any questions or need help with setup, contact support@gopronto.io.