How to Configure SAML 2.0 for SafetyStratus

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/SafetyStratus SAML integration currently supports the following features:

• IdP-initiated SSO 
• SP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Contact the SafetyStratus Support team at support@safetystratus.com and request that they enable SAML 2.0 for your account. Also, request that they provide you with a Client Name value.

2. Include the following Metadata URL with your request:

   Sign into the Okta Admin dashboard to generate this value.

3. The SafetyStratus Support team will process your request and provide you with Client Name value.

4. Save the following as ss.crt:

   -----BEGIN CERTIFICATE-----
   MIIEZTCCAs2gAwIBAgIUAdolA2G0LcVaS57qUbiOzlMpGPEwDQYJKoZIhvcNAQEL
   BQAwQjELMAkGA1UEBhMCWFgxEzARBgNVBAgMClNvbWUtU3RhdGUxCjAIBgNVBAoM
   AVgxEjAQBgNVBAMMCWxvY2FsaG9zdDAeFw0yMTA4MTgyMDEwNThaFw0zMTA4MTgy
   MDEwNThaMEIxCzAJBgNVBAYTAlhYMRMwEQYDVQQIDApTb21lLVN0YXRlMQowCAYD
   VQQKDAFYMRIwEAYDVQQDDAlsb2NhbGhvc3QwggGiMA0GCSqGSIb3DQEBAQUAA4IB
   jwAwggGKAoIBgQDbWWWPEsVf/J450kN4cIDG2K1nBuijiYJt54x9H0Qe360NWp6g
   U/Rg8DXB7A+Vxj5dILSjvp7+Aed7A7JUUHfGdxYKMx8cBO3ffZn0Yef8aI2ujj4c
   RqbQE6U6NTmTRIZEJF9L/A2p53+efWwU/ei/RHNUlbOcIbd9g9Muak4Zcdr+fU/3
   bFYRV4oqdvVs+AnDBXn6lDEv0Ko93+MsNMfV6brZLTU1I+tCxDm45JZD5Ks87ljS
   NmXVUJ7XMa579sTBHjW+2jmjnqzRkjocLkHot4F3gj29XdJ5jKZoAqC09ch85Z9Q
   9ipAd2p+9KSvDX+Y75I4wBu5vi3vB9qMwE06LMSldoex9k1t9ukT2DuP/nDF+7zy
   H8fwzb5iVHl5iAl7ts+NA7qfUnKKlt8Co0j69F60ukmm1W+YhtHfZZ1c0g7Uy2CN
   ww0A7Fq/pvN7zkf0RWYtIgW4XLY08VLUy4ldIsWd1FGcmORDcZgE7CVLLLxH5flo
   It4FgUCLP5xSg1UCAwEAAaNTMFEwHQYDVR0OBBYEFPEegd+wZ7AAxTmp/GZBUbVi
   Fxy+MB8GA1UdIwQYMBaAFPEegd+wZ7AAxTmp/GZBUbViFxy+MA8GA1UdEwEB/wQF
   MAMBAf8wDQYJKoZIhvcNAQELBQADggGBAFU+fK6MNgqE3+2hOmAGsjHlKSsHPrp0
   NzXfRrX339j/5+/+sFmgukiMnq8Ga7QigCAYQu8j3xqK9n61Pfn9h1tPbovevWGk
   WkiOWiDenOUQ9o1zlrgDC7oJH5u/DUaObGbZR6EN/qHUZAMBrh6MJjm6ZekbxHPG
   i7oA7xgIH9edSKTfLPzN1xjdvfPQLD7gL9Xo78LVxfxkhXcGZBCEBH1J6Rsl9X91
   hF4VBdJrDZmdOs7tQxKHcZeuwrzXrUGASBENZXr9I42H88QEl+PWjZHm+1To8Srj
   S6Hzq+WB2nybLA87dfwsziPfdDeeZt/fp+jpvNjnfbWV5PIrOAJxEI5YFpgksZCk
   j3lfB55vdHfbcN1A8sQ8ax6rVf+WihFKcsnAF5LAFPPx3n/MN7nD6By97AT+6CDh
   ZrSu86U3aIRnDZEg91E7mCeXOb3FEU0PI2YkVMiM/zu69ww2A0cz0jWD59gbDSui
   TvUURBzwTE1e44eeQSBsnr0qR9a39RuL6w==
   -----END CERTIFICATE-----
   

5. In Okta, select the Sign On tab for the SafetyStratus app, then click Edit.

   • Encryption Certifcate: Upload the ss.crt file you save in step 4.

   • Scroll down to the Advanced Sign-on Settings section and enter your Client Name (step 3) into the corresponding field.

   • Click Save.

6. Done!

---

Notes

The following SAML attributes are supported:

Name	Value
eppn	user.userName
givenName	user.firstName
sn	user.lastName
mail	user.email

SP-initiated SSO

Go to: https://ssp.labcliq.com/?sp=[clientId]-sp

Where [clientId] is the value from step 3.