Okta

How to Configure SAML 2.0 for Fulcrum

Contents


Supported Features

The Okta/Fulcrum SAML integration currently supports the following features:

For more information on the listed features, visit the Okta Glossary.


Configuration Steps

  1. Login to Fulcrum as an administrator.

  2. Navigate to the Authentication tab in settings (https://web.fulcrumapp.com/settings/authentication), then enter the following:

    • Company Domain: Enter your Company Domain.

      fulcrum1

    • Scroll down to the REMOTE SYSTEM > FULCRUM section.

    • SAML Endpoint URL (Identity Provider URL): Copy and paste the following:

      Sign into the Okta Admin Dashboard to generate this variable.

    • SAML Identity Provider Issuer (also called IdP Entity ID) (Optional): Copy and paste the following:

      Sign into the Okta Admin Dashboard to generate this variable.

    • SAML Public X.509 Certificate: Copy and paste the following:

      Sign into the Okta Admin Dashboard to generate this variable.
    • fulcrum2

    • AuthnContextClassRef: Select urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport.

    • Click Save Changes:

    fulcrum3

  3. In Okta, select the Sign On tab for the Fulcrum SAML app, then click Edit.

    • Enter your Company Domain value you specified in step 3 into the Organization Name field.

    • Click Save:

    fulcrum4

  4. Done!

Notes

The following SAML attributes are supported:


SP-initiated SSO

  1. Go to https://web.fulcrumapp.com/users/saml

  2. Enter your Domain value, then click Sign In:

  3. fulcrum5