Okta

How to Configure SAML 2.0 for Ariba Contract Management

Contents

Supported Features

The Okta/Ariba Contract Management SAML integration currently supports the following features:

  • IdP-initiated SSO
  • SP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

Configuration Steps

  1. Email Ariba Support and request that they enable SAML 2.0 for your account.

  2. Copy and paste the following text into the message and label it Login URL.

    Sign into the Okta Admin dashboard to generate this value.

    3. Copy and paste the following text into the message and label it Logout URL.

    Sign into the Okta Admin dashboard to generate this value.

  3. Download the following Certificate and attach it to the email.Sign into the Okta Admin dashboard to generate this value.

  4. Ariba will process your request. After you receive a confirmation email, you can assign people to the application.

  5. OPTIONAL:

    Note: If the domain for your SSO URL is https://s1.ariba.com and the domain for your Audience URI is http://[your-subdomain].sourcing.ariba.com, then skip this step.

    In case Ariba informs you that your SSO URL is something like: https://s1-2.ariba.com/Buyer/Main/ad/samlAuth/SSOActions?realm=[your-subdomain] and your Audience URI is something like: http://[your-subdomain].sourcing-2.ariba.com, do the following:

    In Okta select the Sign On tab for the Ariba Contract Management SAML app, then click Edit:

    • Enter the SSO URL and Audience URI values provided to you by Ariba into the corresponding fields.

    • Click Save:

    ariba_new1.png

  6. Done!

Notes

Note: If you have followed the step 5 skip this note.

Make sure that you entered the correct value in the SubDomain field under the General tab in Okta. Using the wrong value will prevent you from authenticating via SAML to Ariba Contract Management.

SP-initiated SSO

Navigate to your Ariba Contract Management home page at http://[yourSubdomain].sourcing.ariba.com/.

Where [yourSubdomain] is the Ariba subdomain for your organization.