The Okta/PlusPlus SAML integration currently supports the following features:
For more information on the listed features, visit the Okta Glossary.
Login to your PlusPlus instance as an administrator.
Navigate to Settings > SSO and Security.
Under the Password Login section, make sure the Password login option is enabled.
NOTE: Do not disable the Password login option until SAML has been verified successfully. If you have locked your account, use the following back door URL, where staff user can login with username/password and disable SAML authentication: [yourPlusPlusDomain]/security.
Scroll down to the Single Sign On (SSO) section and do the following:
Okta SSO: Check this box.
SAML Issuer URL: Copy and paste the following:
Sign into the Okta Admin Dashboard to generate this variable.
SAML Endpoint: Copy and paste the following:
Sign into the Okta Admin Dashboard to generate this variable.
SAML X.509 Certificate: Copy and paste the following:
Sign into the Okta Admin Dashboard to generate this variable.
Click Save Changes.
In Okta, select the Sign On tab for the PlusPlus app, then click Edit.
Scroll down to the ADVANCED SIGN-ON SETTINGS section.
Default Relay State: Enter okta.
Click Save.
Done!
Make sure that you entered the correct value in the Base URL field under the General application tab in Okta. Using the wrong value will prevent you from authenticating via SAML to PlusPlus.
The following SAML attributes are supported:
| Name | Value |
|---|---|
| First Name | user.firstName |
| Last Name | user.lastName |
| user.email |
Open your PlusPlus login URL.
Click Login with Okta:
