How to Configure SAML 2.0 for Envestnet Tamarac

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/Envestnet Tamarac SAML integration currently supports the following features:

• IdP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Contact the Envestnet Tamarac Support team and request that they enable SAML 2.0 for your account. Also, ask them to provide you with the PartyCode value.

2. Provide the following information:

   • Save and attach the following certificate:

     Sign into the Okta Admin Dashboard to generate this variable.

   • IDP Issuer Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

3. The Envestnet Tamarac Support team will process your request and provide you with a PartyCode value.

4. In Okta, select the Sign On tab for the Envestnet Tamarac app, then click Edit.

   • Scroll down to ADVANCED SIGN-ON SETTINGS.

   • Enter the PartyCode (step 3) into the corresponding field.

   • Click Save:

   

5. Done!

---

Notes

• You will be prompted to log in the first time, and you’ll need to enter your email address and password. Once you validate the user by logging in, subsequent SSO requests will directly log you in.

• The following SAML attributes are supported:

  Name	Value
  email	user.userName