How to Configure SAML 2.0 for Cornerstone OnDemand

Contents

• Supported Features
• Configuration Steps

---

Supported Features

The Okta/Cornerstone OnDemand SAML integration currently supports the following features:

• IdP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Contact your Cornerstone account representative and request that they turn on SAML 2.0 support. Also ask them to provide you with the ACS URL value.

2. Include the following with your request:

   • X.509 Certificate: Download and attach the following:

     Sign into the Okta Admin dashboard to generate this value.

   • IdP Login URL: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Entity ID: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

3. The Cornerstone OnDemand Support team will process your request and provide you with the ACS URL value.

4. In Okta, select the Sign On tab for the Cornerstone OnDemand app, then click Edit value.

   • Scroll down to the ADVANCED SIGN-ON SETTINGS section.

   • Enter the ACS URL value from step 3 into the corresponding field.

   • Click Save.

   

5. Done!