Okta

How to Configure SAML 2.0 for Hosted Graphite

This setup might fail without parameter values that are customized for your organization. Please use the Okta Administrator Dashboard to add an application and view the values that are specific for your organization.

Contents

Supported Features

The Okta/Hosted Graphite SAML integration currently supports the following features:

For more information on the listed features, visit the Okta Glossary.

Configuration Steps

  1. Login to Hosted Graphite as an administrator.

  2. Navigate to Access > SAML Setup.

  3. Assertion Consumer Service URL – note your account User ID value.

    For example, if your Assertion Consumer Service URL value is https://www.hostedgraphite.com/complete/saml/12345678/.

    Your User ID is 12345678.

  4. Enter the following:

    • Entity or Issuer ID: Copy and paste the following:

      Sign into the Okta Admin Dashboard to generate this variable.

    • SSO Login URL: Copy and paste the following:

      Sign into the Okta Admin Dashboard to generate this variable.

    • Select Default User Role for the new user.

    • X.509 Certificate: Copy and paste the following (PEM text format):

      Sign into the Okta Admin Dashboard to generate this variable.

    • Click Save:

    “hostedgraphite_newa.png"

  5. In Okta, select the Sign On tab for the Hosted Graphite app, then click Edit.

    • Scroll down to the ADVANCED SIGN-ON SETTINGS section.

    • Enter the User ID value (step 3) into the corresponding field.

    • Click Save:

    “hostedgraphite_newb.png"

  6. Done!

Notes

The following SAML attributes are supported:


SP-initiated SSO

Open https://www.hostedgraphite.com/login/saml/[yourUserId]/ URL.