How to Configure SAML 2.0 for Menlo Security

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/Menlo Security SAML integration currently supports the following features:

• SP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Sign in to the Menlo Security Admin Portal here: https://admin.menlosecurity.com.

2. Go to Settings > Authentication.

3. Enter the following information (see screen shot at end of step for reference):

   • Gateways IP Addresses: Enter the corporate gateway IP address(es) where user traffic will originate. SAML authentication will be automatically used for users coming from this IP address.

   • Select Enable user authentication using SAML.

   • Allow External Access: Choose whether external access is allowed, or whether SAML authentication is limited to requests from the specified Gateway IP address(es).

   • SAML 2.0 Endpoint (HTTP): Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Service Identifier (Issuer URL): Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • X.509 Certificate: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Click Save Changes.

   

4. Done!

---

Notes

The following SAML attributes are supported:

Name	Value
uid	user.userName

SP-initiated SSO

Ask your Menlo Security representative how to initiate the SP flow.