How to Configure SAML 2.0 for QStream

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/QStream SAML integration currently supports the following features:

• SP-initiated SSO
• IdP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Email QStream Support at support@qstream.com and request that they enable SAML for your account.

2. Include the following information with your request:

   • Certificate Fingerprint: Copy and paste the following:

     Sign into the Okta Admin dashboard to generate this value.

   • Single Sign-on URL: Copy and paste the following:

     Sign into the Okta Admin dashboard to generate this value.

   • Issuer ID: Copy and paste the following:

     Sign into the Okta Admin dashboard to generate this value.

3. QStream Suport will notify you when SAML is enabled for your account.

4. Done!

---

Notes

• Make sure that you entered the correct value in the SubDomain, ACS URL and Audience Restriction fields under the General tab in Okta. Using the wrong value will prevent you from authenticating via SAML to QStream.




• The following SAML attributes are supported:

  Name	Value
  email	user.userName
  last_name	user.lastName
  first_name	user.firstName
  sso_idp	okta

SP-initiated SSO

1. Go to: https:/[your_subdomain].qstream.com

2. Click Log in