How to Configure SAML 2.0 for Kaleo

Contents

• Supported Features
• Configuration Steps
• Notes

Supported Features

The Okta/Kaleo SAML integration currently supports the following features:

• SP-initiated SSO
• IdP-initiated SSO
• Just In Time (JIT) provisioning

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Sign on to Kaleo as an administrator.
2. Go to My Account > Tenant Panel.
3. Click Settings in the left navigational pane, then select the Application Settings tab.

4. Edit each of the following settings, and add the following values:

   • authentication.saml.idp_cert_fingerprint:

     Sign into the Okta Admin Dashboard to generate this variable.

   • authentication.saml.idp_sso_target_url:

     Sign into the Okta Admin Dashboard to generate this variable.

   

5. Done!

---

Notes

• Make sure that you entered the correct value in the Subdomain field under the General tab in Okta. Using the wrong value will prevent you from authenticating via SAML to Kaleo.

• The following SAML attributes are supported:

  Name	Value
  http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname	user.firstName
  http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname	user.lastName

SP-initiated SSO

1. Go to https://[your-subdomain].kaleosoftware.com

2. Click Use My Company Single Sign On.