How to Configure SAML 2.0 for BT Cloud Phone

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/BT Cloud Phone SAML integration currently supports the following features:

• IdP-initiated SSO
• SP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Login to BT Cloud Phone as as administrator.

2. Navigate to Tools > Single Sign-on:

   

3. In the Set up SSO by yourself section, click Edit:

   

4. Use the link below to download and save your IdP Metadata file:

   Sign into the Okta Admin dashboard to generate this value.

5. In the Upload IdP Metadata section, select Upload with file from the dropdown menu, then click Browse to locate and update the metadata file you just saved (step 4):

   

6. In the Attribute Mapping section, select Custom from the Map Email Attribute to dropdown menu, then enter email in the field that appears:

   

7. Click Save:

   

8. In the Set up SSO by yourself section, click Download to obtain your SP metadata:

   

9. Open the SP metadata file you just downloaded in a text editor and take note of the entityID and Location values,

   

10. In Okta, select the Sign On tab for the BT Cloud Phone app, then click Edit:

    • Default Relay State: Enter: https://portal.btcloudphone.bt.com/mobile/ssoLogin.

    • Audience Restriction: Copy the entityID value from the metadata file (step 11) into this field.

    • ASC URL: Copy the Location value from the metadata file (step 11) into this field.

    • Click Save:

    

11. Done!

---

Notes

The following SAML attributes are supported:

Name	Value
email	${user.userName}
number	user.primaryPhone

SP-initiated SSO

1. Go to https://portal.btcloudphone.bt.com/login/startupSSOLogin.html.

2. Enter your email address.
3. Click Submit.