How to Configure SAML 2.0 for Secret Server

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/Secret Server SAML integration currently supports the following features:

• SP-initiated SSO
• IdP-initiated SSO

---

Configuration Steps

1. Configure SAML in Secret Server using the following article as a guide: How to Configure SAML 2.0 for Secret Server

2. For the saml.config file, use the following values:

   • PartnerIdentityProvider Name: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • SingleSignOnServiceUrl: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • CertificateFile: Download and save the following encryption certificate file:

     Sign into the Okta Admin Dashboard to generate this variable.

3. In Okta, select the General tab for the Secret Server SAML app, then click Edit.

   • Find the ServiceProvider Name value from the saml.config file configured above and enter it into the EntityId field.

   • Click Save.

4. Still in Okta, select the Sign On tab for the Secret Server SAML app, then click Edit.

   • Click Browse to locate your Secret Server encryption certificate, the Upload to upload it to Okta.

   • Click Save.

5. Done!

---

Notes

SP-initiated SSO

Open your Secret Server login URL.