How to Configure SAML 2.0 for ClearStory

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/ClearStory SAML integration currently supports the following features:

• SP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Contact ClearStory Support and request that they enable SAML for your app.

2. Provide the following information:

   • Login URL:

     Sign into the Okta Admin Dashboard to generate this variable.

   • IDP Issuer/Entity ID:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Logout URL:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Download and attach the x.509 Certificate in .cert format:

     Sign into the Okta Admin Dashboard to generate this variable.

3. The ClearStory data support team will process your request.

4. In Okta, select the Sign On tab for the ClearStory SAML app, then click Edit.

   • Change the Application username format to Email.

   • Click Save.

   

5. After receiving a confirmation email from the ClearStory Support team, you can start assigning people to the application.

6. Done!

---

Notes

Make sure that you entered the correct value in the Subdomain field under the General tab in Okta. Using the wrong value will prevent you from authenticating via SAML to ClearStory Data.

SP-initiated SSO

1. Open your ClearStory Data login URL.

2. Click Sign in with Okta: