Okta

Configure SAML 2.0 for SafetyCulture

This guide provides instructions on configuring SAML 2.0 Single Sign-On (SSO) for the SafetyCulture app.

Contents

Supported features

SafetyCulture supports the following features:

Prerequisites

Integrate the app in Okta

Retrieve your SSO URL and SP entity ID from SafetyCulture

  1. Go to the SafetyCulture web app and sign in.
  2. Click your org name in the lower-left corner and select Organization settings.
  3. Select the Security tab.
  4. In the Single Sign-On (SSO) section, click Set up.
  5. Enter your team's email domains.
  6. Click Next.
  7. Click Set up to be redirected to the provider setup page.
  8. Click Get Started.
  9. Select Custom SAML.
  10. Click Next.
  11. Copy the Single Sign-On URL and Service Provider Entity ID.
    SafetyCulture Custom SAML configuration page showing Single Sign-On URL and Service Provider Entity ID fields
  12. Click Next.

Configure the app in Okta

  1. In the Admin Console, go to Applications > Applications.
  2. Click Browse App Catalog.
  3. Search for and select the SafetyCulture app.
  4. Click Add Integration.
  5. On the General Settings tab, enter the Single Sign-On URL and the Service Provider Entity ID you retrieved from SafetyCulture.
  6. Click Done.
  7. On the Authentication tab, copy the Metadata URL.
    If you're using Okta Classic Engine, the Authentication tab is called the Sign On tab.

Configure SAML in SafetyCulture

  1. Return to the SafetyCulture provider setup page and enter the Metadata URL you copied from Okta.
  2. Click Next.
  3. Click Create Connection, then click Proceed.
  4. Click Test Connection to verify the setup.
  5. Click Enable Connection.
  6. In SafetyCulture, click Okay on the confirmation dialog.
  7. Toggle on SSO Connection.
    SafetyCulture Single Sign-On settings showing the SSO connection toggle
  8. Click Save changes.

Verify SP-initiated SSO

  1. Go to the SafetyCulture sign-in page. Enter the email address assigned to the SafetyCulture app in Okta and click Continue.
  2. Click Sign in with SSO. You're redirected to the sign-in page for your org.
  3. Enter your Okta credentials. You're signed in to SafetyCulture.

Supported SAML attributes

SafetyCulture supports these SAML attributes:

Attribute Value
email user.email
firstname user.firstName
lastname user.lastName