How to Configure SAML 2.0 for Spendesk

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/Spendesk SAML integration currently supports the following features:

• IdP-initiated SSO
• SP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Contact the Spendesk Support team (support@spendesk.com) and request that they enable SAML 2.0 for your account.

2. Include the following IDP Metadata XML with your request:

   Sign in to Okta Admin app to have this variable generated for you.

3. The Spendesk Support team will process your request and provide you a unique Customer ID.

4. In Okta, select the Sign On tab for the Spendesk SAML app, then click Edit:

   • Enter the Customer ID (step 3) into the corresponding field.

   • Click Save:

   

5. Done!

---

Notes

Okta sends the following default attributes as part of the SAML assertion:

Name	Value
firstName	user.firstName
lastName	user.lastName
email	user.userName

SP-initiated SSO

1. Go to: https://www.spendesk.com/auth/login?saml=true

2. Click Continue with SAML SSO:

   

3. Enter your Email, then click Continue with SAML SSO: