Okta

How to Configure SAML 2.0 for Mode Analytics

Contents


Supported Features

The Okta/Mode Analytics SAML integration currently supports the following features:

For more information on the listed features, visit the Okta Glossary.


Configuration Steps

  1. Login to your Mode Analytics account as an administrator.

  2. Click on your account, then select Organization Settings:

    Mode Analytics settings page

  3. Navigate to Member Authorization > Add new provider:

    Mode Analytics New Provider page

  4. Click Edit, then enter the following:

    • Display Name: Enter Okta.

    • Identity Provider SSO URL: Copy and paste the following:

      Sign into the Okta Admin Dashboard to generate this variable.

    • Identity Provider Certificate (PEM): Copy and paste the following:

      Sign into the Okta Admin Dashboard to generate this variable.
    • Make a note of the Provider Token value.

    • Click Save:

    Mode Analytics New Provider config

  5. Enable the configuration:

    Enable the configuration

  6. In Okta, select the Sign On tab for the Mode Analytics app, then click Edit.

    • Enter your Provider Token you copied in step 4 into the corresponding field.

    • Click Save:

    Mode Analytics config in Okta

  7. (Optional): If you want to enable SP-initiated SSO:

    • Set default method: Select Okta:

      For SP-initiated flow: Set Okta as default login method

    • Login Only > Username & Password: Turn this option off:

    • For SP-initiated flow: Turn off Username & Password login

      IMPORTANT: Make sure you have tested SAML authentication successfully before you turn off Username & Password login. We don't recommend you to use Organization Admin account for the first SAML login. This prevents you from logging in with Username & Password.

  8. Done!



Notes

The following SAML attributes are supported:


SP-initiated SSO

  1. Go to: https://app.mode.com/signin

  2. Enter your email address, then click Continue:

    For SP-initiated flow: Turn off Username & Password login