How to Configure SAML 2.0 for NexTravel

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/NexTravel SAML integration currently supports the following features:

• IdP-initiated SSO
• SP-initiated SSO
• JIT (Just In Time) Provisioning

---

Configuration Steps

1. In NexTravel, click on your company name, then select Settings:

   

2. Select Single Sign-On (SSO), then click Add SSO:

   

3. Enter the following:

   • Make a copy of your Company ID: This value is part of the SP - ASSERTION CONSUMER SERVICE (ACS) value, shown in the red box in the screen shot below.

   • Identity Provider (IDP): Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • IDP - SSO URL: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • IDP - SLO URL: Copy and paste the following:

     Sign into the Okta Admin dashboard to generate this value.

   • IDP - CERTIFICATE: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Click Save.

   

4. Done!

---

Notes

• Make sure that you entered the correct value in the Company ID field under the General tab in Okta. Using the wrong value will prevent you from authenticating via SAML to NexTravel.




• The following SAML attributes are supported:

  Name	Value
  User.FirstName	user.firstName
  User.LastName	user.lastName
  User.email	user.email
  User.login	user.login

SP-initiated SSO

Go to https://www.nextravel.com/saml/[your-companyID]/sso.