How to Configure SAML 2.0 for Kollective

Contents

• Supported Features
• Configuration Steps
• Notes

Supported Features

The Okta/Kollective SAML integration currently supports the following features:

• SP-initiated SSO
• Just In Time (JIT) provisioning

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Contact the Kollective Support team and request that they enable SAML 2.0 for your account.

2. Include the following Metadata URL with your request:

   Sign into the Okta Admin dashboard to generate this value.

3. The Kollective support team will process your request. After receiving a confirmation email, you can start assigning people to the application.

4. OPTIONAL: If you need to send Okta Groups as part of the SAML response:

   1. In Okta select the Sign On tab for the Kollective app, and then click Edit.

   2. Select your preferred group filter from the dropdown list (the Matches regex rule with the value .* in order to send all groups to the Kollective instance we used in our example).

   3. Click Save.

   

5. Done!

---

Notes

• Make sure that you selected the correct value in the Environment field under the General tab in Okta. Using the wrong value will prevent you from authenticating via SAML to Kollective.

• The following SAML attributes are supported:

  Name	Value
  http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname	user.firstName
  http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname	user.lastName
  http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress	user.email
  http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	user.userName
  http://schemas.xmlsoap.org/claims/Group	Configured in the UI, see step 4

SP-initiated SSO

1. Open your login URL.

2. In the top right of the page, click Log in.