Okta

How to Configure SAML 2.0 for Hosted Graphite

Contents

Supported Features

The Okta/Hosted Graphite SAML integration currently supports the following features:

For more information on the listed features, visit the Okta Glossary.

Configuration Steps

  1. Login to Hosted Graphite as an administrator.

  2. Navigate to Access > SAML Setup.

  3. Assertion Consumer Service URL – note your account User ID value.

    For example, if your Assertion Consumer Service URL value is https://www.hostedgraphite.com/complete/saml/12345678/.

    Your User ID is 12345678.

  4. Enter the following:

    • Entity or Issuer ID: Copy and paste the following:

      Sign into the Okta Admin Dashboard to generate this variable.

    • SSO Login URL: Copy and paste the following:

      Sign into the Okta Admin Dashboard to generate this variable.

    • Select Default User Role for the new user.

    • X.509 Certificate: Copy and paste the following (PEM text format):

      Sign into the Okta Admin Dashboard to generate this variable.

    • Click Save:

    “hostedgraphite_newa.png"

  5. In Okta, select the Sign On tab for the Hosted Graphite app, then click Edit.

    • Scroll down to the ADVANCED SIGN-ON SETTINGS section.

    • Enter the User ID value (step 3) into the corresponding field.

    • Click Save:

    “hostedgraphite_newb.png"

  6. Done!

Notes

The following SAML attributes are supported:


SP-initiated SSO

Open https://www.hostedgraphite.com/login/saml/[yourUserId]/ URL.