How to Configure SAML 2.0 for Mapbox

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/Mapbox SAML integration currently supports the following features:

• IdP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Log in to your Mapbox account.

2. Select the Settings tab:

   

3. Select Security from the left navigation pane:

   

4. Click Edit single sign-on:

   

5. Enter the following:

   • Identity provider sign-on URL: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Issuer ID: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • X.509 Certificate: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Click Save changes:

   

6. Done!

---

Notes

The following SAML attributes are supported:

Name	Value
Role	appuser.role

Here is an example describing how to add and use the Role attribute:

1. In Okta, navigate to Directory > Profile Editor.

2. Search for the mapbox app, then click Profile:

   

3. Click Add Attribute, then enter the following:

   • Display name: Enter a preferred attribute name. In our example, we used Role.

   • Variable name: role.

   • Click either Save or Save and Add Another.

   Note: Scope (optional): If you check User personal, the current attribute will be available once you assign the user to the Mapbox application and will not be available once you assign the group to the app.

   

4. Click Mappings:

   

5. Select the Okta to Mapbox tab.

6. Start typing the required attribute from the Okta Base User profile (or use the drop-down list) and select the attributes you want to map.

7. In our example, we have selected the role attribute, and then use the green arrows (Apply mapping on user create and update).

8. Click Save Mappings:

   

9. Click Apply updates now:

   

Okta will now pass the Role attribute with the value of the Role field from the Okta Base User Profile to the Mapbox.