How to Configure SAML 2.0 for OpenAir

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/OpenAir SAML integration currently supports the following features:

• SP-initiated SSO
• IdP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Contact your OpenAir Customer Service or Professional Services and request that they enable SAML 2.0 for your account.

2. Save, then attach the following Metadata file to your request:

   Sign into the Okta Admin dashboard to generate this value.

3. The OpenAir Support team will process your request and provide you with your Profile ID value. After receiving a confirmation email, you can start assigning people to the application.

4. In Okta, select the Sign On tab for the OpenAir SAML app, then click Edit:

   • Scroll down to Advanced Sign-on Settings.

   • Enter your Profile ID (step 3) into the corresponding field.

   • Click Save.

5. Done!

---

Notes

• Make sure that you entered the correct value in the Your OpenAir Company ID and Your OpenAir endpoint subdomain fields under the General tab in Okta. Using the wrong value will prevent you from authenticating via SAML to OpenAir.

• The following SAML attributes are supported:

  Name	Value
  account_nickname	This comes from the Company ID field

SP-initiated SSO

1. Go to https://www.openair.com/index.pl

2. Click SSO users can login here.

3. Enter your Company ID and User ID, then click Log in.