How to Configure SAML 2.0 for Spoke

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/Spoke SAML integration currently supports the following features:

• IdP-initiated SSO
• SP-initiated SSO

---

Configuration Steps

1. Contact the Spoke Support team at support@unboxedtechnology.com and request that they enable SAML 2.0 for your account.

2. Include the following information with your email:

   • IDP Issuer/Entity ID: Copy and paste the following:

     Sign in to the Okta Admin dashboard to generate this value.

   • Login URL/SignOn URL: Copy and paste the following:

     Sign into the Okta Admin dashboard to generate this value.

   • x.509 Certificate: Copy and paste the following (in PEM Format):

     Sign into the Okta Admin Dashboard to generate this variable.

3. Spoke will process your request. After receiving a confirmation email, you can start assigning people to the application.

4. Done!

---

Notes

The following SAML attributes are supported:

Name	Value
firstName	${user.firstName}
lastName	${user.lastName}
email	${user.userName}

SP-initiated SSO

• Go to your Spoke URL, for example: https://www.spoketraining.com/acme/Login.

• You will be prompted to sign in to Okta (if there is no active Okta session).

• You will then be automatically logged in to your Spoke account.