How to Configure SAML 2.0 for Heroku

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/Heroku SAML integration currently supports the following features:

• SP-initiated SSO
• IdP-initiated SSO
• JIT (Just In Time) Provisioning

---

Configuration Steps

1. Copy the following and save as metadata.xml to be uploaded later.

   Sign in to Okta Admin app to have this variable generated for you.

2. Log in to your Heroku account as an administrator.

3. Navigate to Your Organization > Settings, or go to https://dashboard.heroku.com/orgs/your-org-name/settings

4. Click Upload Metadata… then locate and upload the metadata.xml file you saved in step 1.

   

5. Done!

---

Notes

For SP-initiated SSO

Use Heroku Login URL (Start URL): https://sso.heroku.com/saml/[yourOrganizationName]/init