How to Configure SAML 2.0 for SignalFX

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/SignalFX SAML integration currently supports the following features:

• SP-initiated SSO (See the Optional: For SP-initiated SSO part of step 5)
• IdP-initiated SSO
• JIT (Just In Time) Provisioning

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Log on to your SignalFx instance as an administrator.

2. Navigate to INTEGRATIONS.

3. Search for Okta integration, then click the Okta icon:



4. Click CREATE NEW INTEGRATION:



5. In the screen that opens, enter the following:

   • Name: Enter Okta.

   • Save the information in the Integration ID field.

   • Optional: For SP-initiated SSO: Check the Show on login page box if you are going to activate SP-initiated SSO for your organization. Follow the steps in the following guide to set up a custom URL for accessing SignalFx:

     https://docs.signalfx.com/en/latest/admin-guide/sso.html#custom-url

   • Public Key: Copy and paste the following:

     Sign in to the Okta Admin dashboard to generate this value.

   • Issuer URL: Copy and paste the following:

     Sign in to the Okta Admin dashboard to generate this value.

   • Metadata URL: Copy and paste the following:

     Sign in to the Okta Admin dashboard to generate this value.

   • Click SAVE:

   

6. In Okta, select the Sign On tab for the SignalFX app, then click Edit.

   • Scroll down to the ADVANCED SIGN-ON SETTINGS section.

   • Enter the Integration ID value you copied in step 5 into the corresponding field.

   • Click Save:

   

7. Done!

---

Notes

• Make sure that you entered the correct value in the subdomain field under the General application tab in Okta. Using the wrong value will prevent you from authenticating via SAML to SignalFx.

• The following SAML attributes are supported:

  Name	Value
  User.email	user.userName
  User.FirstName	user.firstName
  User.LastName	user.lastName
  PersonImmutableID	user.userName

SP-initiated SSO

1. Open your custom URL value (see the Optional: For SP-initiated SSO part of step 5).

2. Click LOG IN WITH OKTA: