How to Configure SAML 2.0 for SugarCRM

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/SugarCRM SAML integration currently supports the following features:

• IdP-initiated SSO
• SP-initiated SSO
• JIT (Just In Time) Provisioning

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Sign into your SugarCRM instance as an Administrator.

2. In the upper right corner, click on the profile icon, then select Administration.

3. In the Users section, select Password Management:

   

4. In the SAML Authentication section, check Enable SAML Authentication:

   

5. Enter the following (see screen shot at end of step for reference):

   • Login URL: Copy and paste the following:

     Sign into the Okta Admin dashboard to generate this value.

   • SLO URL: Do not enter any value. This field must be empty.

   • X.509 Certificate: Copy and paste the following:

      Sign into the Okta Admin dashboard to generate this value. 

   • Important: Check the Load login screen in same window to avoid pop-up blocking option.

   • Click Save.

     

6. Done!

---

Notes

Make sure that you entered the correct value in the Login URL field under the General tab in Okta. Using the wrong value will prevent you from authenticating via SAML to SugarCRM.

SP-initiated SSO

1. Open your SugarCRM login URL.

2. Click Log in.