How to Configure SAML 2.0 for Hightower

Supported Features

The Okta/Hightower SAML integration currently supports the following features:

For more information on the listed features, visit the Okta Glossary.

Contact Hightower Support and request that they enable SAML for your app.
Provide the following information:
- x.509 Certificate. Either:
  - Download then attach the x.509 Certificate in .cert format:
    
    Sign into the Okta Admin Dashboard to generate this variable.
  - Cut and paste the x.509 Certificate in text format:
```
Sign into the Okta Admin Dashboard to generate this variable.
```
- Login URL/SignOn URL:
  
  Sign into the Okta Admin Dashboard to generate this variable.
- IDP Issuer/Entity ID:
  
  Sign into the Okta Admin Dashboard to generate this variable.
Hightower will process your request and provide you with the ACS URL and Audience Restriction values.
In Okta, select the Sign On tab for the Hightower app, then click Edit.
- Scroll down to the ADVANCED SIGN-ON SETTINGS section.
- Enter the ACS URL and Audience Restriction values from step 3 into the corresponding fields.
- Click Save:
Done!

The following SAML attributes are supported:

Name	Value
name	user.userName