How to Configure SAML 2.0 for IMIchat

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/IMIchat SAML integration currently supports the following features:

• IdP-initiated SSO
• SP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Login to your IMIchat as an administrator.

2. Navigate to Settings - Single Sign On.

3. Enable Single Sign On.

4. Under SAML Configuration, enter the following:

   • SAML SSO URL: Copy and paste the following:

     Sign into the Okta Admin dashboard to generate this value.

   • Entity ID: Copy and paste the following:

     Sign in to the Okta Admin app to have this variable generated for you.

   • Remote Logout URL: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Certificate Thumbprint: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • OPTIONAL: Enable the Force SSO Login Alone option.

     Note: If you enable this, any user visiting your IMIchat instance will be redirected immediately to the SAML SSO URL configured. Do not enable this option until SAML authentication has been tested successfully.

   • Click SAVE CHANGES.

   

5. Done!

---

Notes

• Make sure that you entered the correct value in the Subdomain field under the General application tab in Okta. Using the wrong value will prevent you from authenticating via SAML to IMIchat.

  For example, if you log into https://acme.imi.chat/, enter: acme.

• The following SAML attributes are supported:

  Name	Value
  loginid	user.userName

SP-initiated SSO

1. Open your IMIchat login URL.

2. Click the Login with [yourIMIchatAccount] link: