How to Configure SAML 2.0 for NationBuilder

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/NationBuilder SAML integration currently supports the following features:

• IdP-initiated SSO
• SP-initiated SSO
• Just In Time (JIT) provisioning

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Login to your NationBuilder account as an administrator.

2. Navigate to Settings > Auth.

3. Click the + New provider link:

   

4. Enter the following values:

   • Name: Okta.

   • Slug: Okta (this can be any value).

   • Unique ID: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Single sign-on endpoint URL: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Single sign-out endpoint URL: Leave this field empty.

   • X.509 certificate: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Optional. Check the Give new users control panel access: box, then assign permission set to a user, select the preferred role (Admin or Staffer.

   • Click Save.

   

5. In Okta, select the Sign On tab for the NationBuilder app, click Edit, then enter the following:

   1. Enter the Slug value you specified in step 4.

   2. Click Save:

   

6. Done!

---

Notes

• Make sure that you entered the correct value in the subdomain field under the General tab in Okta. Using the wrong value will prevent you from authenticating via SAML to Nation Builder.




• The following SAML attributes are supported:

  Name	Value
  companyID	companyid
  UserID	userName

SP-initiated SSO

1. Create a button for the SP-initiated flow anywhere on your site. For example: https://[yourSubDomain].nationbuilder.com/forms/user_sessions/new.

   Use the following code for the button:

   <a href="{{ request.authentication_modes.[yourSlug].sign_in_url }}">
   "Sign in with {{ request.authentication_modes.[yourSlug].label }}"
   </a>
   

2. Go to https://[yourSubDomain].nationbuilder.com/forms/user_sessions/new.

3. Click the button you created in step 1.