How to Configure SAML 2.0 for Brandfolder

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/Brandfolder SAML integration currently supports the following features:

• SP-initiated SSO
• IdP-initiated SSO
• JIT (Just In Time) Provisioning

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Contact the Brandfolder Customer Experience team and request that they enable SAML 2.0 for your account.

2. Include the following Metadata URL with your request: Copy and paste the following:

   Sign into the Okta Admin dashboard to generate this value.

3. The Brandfolder Customer Experience team will process your request and will provide you with an ACS URL value in the following format:

   https://brandfolder.com/organizations/[slug]/saml

   For example: https://brandfolder.com/organizations/acme/saml

4. In Okta, select the Sign On tab for the Brandfolder app, then click Edit.

   • [OPTIONAL GROUPS]: Select your preferred group filter from the teams dropdown list (the Regex> rule with the value ".*" in order to send *all* Okta groups as part of the teams group attribute we used in our example) for the attribute.

   

   • Scroll down to the ADVANCED SIGN-ON SETTINGS section.

   • Enter the Slug (step 3) value into the corresponding field.

   • Click Save.

   

5. Done!

---

Notes

The following SAML attributes are supported:

Name	Value
firstname	user.firstName
surname	user.lastName
teams	This is configured in the app UI; see GROUPS instructions above.

SP-initiated SSO

1. Open the following URL: https://brandfolder.com/organizations/[slug]/signin.

2. Click Login with SSO: