How to Configure SAML 2.0 for Userflow

Contents

• Supported Features
• Configuration Steps
• Notes

Supported Features

The Okta/Userflow SAML integration currently supports the following features:

• SP-initiated SSO
• IdP-initiated SSO
• JIT (Just In Time) Provisioning
• SP-Initiated Single Logout

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Contact the Userflow Support team (support@userflow.com) and request that they enable SAML 2.0 for your account.

2. Include the following information with your request:

   • Metadata URL: Copy and paste the following:

     Sign into the Okta Admin dashboard to generate this value.

   • SLO URL: Copy and paste the following:

     Sign into the Okta Admin dashboard to generate this value.

3. The Userflow Support team will process your request and will provide you with the Customer ID value.

4. Save this certificate as userflow.cert.

5. In Okta, select the Sign On tab for the Userflow SAML app, then click Edit:

   • Default Relay State: Enter https://userflow.com/app

   • Check Enable Single Logout.

   • Signature Certificate: Upload the file userflow.cert you saved in step 4.

   • Encryption Certificate Upload the file userflow.cert you saved in step 4.

   • Enter your Customer ID value provided to you by support team into the corresponding field.

   • Click Save:

   

6. Done!

---

Notes

The following SAML attributes are supported:

Name	Value
email	user.email
firstName	user.firstName
lastName	user.lastName

SP-initiated SSO

1. Go to: https://userflow.com/app/sign-in

2. Enter your Email, then click Continue with single sign-on.