How to Configure SAML 2.0 for Zip

Contents

• Supported Features
• Configuration Steps
• Notes

Supported Features

The Okta/Zip SAML integration currently supports the following features:

• SP-initiated SSO
• IdP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Contact the Zip Support team at onboarding@ziphq.com and request that they help you to enable SAML 2.0 for your tenant.

2. Include the following information with your request:

   • Metadata URL: Copy and paste the following:

     Sign into the Okta Admin dashboard to generate this value.

   • Issuer: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • ACS URL: Copy and paste the following:

     Sign into the Okta Admin Dashboard to generate this variable.

   • Certificate: Download and attach the following:

     Sign into the Okta Admin Dashboard to generate this variable.

3. In Okta select the Sign On tab for the Zip SAML app, then click Edit.

   • Default Relay State: Enter https://[yourSubDomain].ziphq.com/

     For example: If you log into https://acme.ziphq.com/, your Default Relay State value is https://acme.ziphq.com/

   • Click Save.

4. The Zip Support team will process your request. After receiving a confirmation email, you can start assigning people to the application.

5. Done!

---

Notes

• Make sure that you entered the correct value in the subdomain field under the General tab in Okta. Using the wrong value will prevent you from authenticating via SAML to Zip.




• The following SAML attributes are supported:

  Name	Value
  username	user.userName
  first_name	user.firstName
  last_name	user.lastName

SP-initiated SSO

1. Open your login URL.

2. Click Sign in with Okta