Single Sign-On (SS0)
      Back to home
      1. Mursion Support
      2. Tech Implementation
      3. Single Sign-On (SS0)

      Configuring SAML 2.0 with Okta

      Follow this guide to use SAML 2.0 with Okta to connect to Mursion

      Introduction

      This guide provides information on how to configure SAML 2.0 integration between Mursion and Okta.

      Supported Features

      The Mursion and Okta SAML 2.0 integration currently supports the following features:

      • SP-initiated SSO
      • JIT (Just In Time) Provisioning

      Configuration Steps

      Add Mursion App Integration in Okta

      1. In Okta, browse the App Integration Catalog and search for Mursion.
      2. Click the Add Integration button on the Mursion app details page.
      3. On the General Settings tab:
        1. Application Visibility: Check both Do not display application icon checkboxes. A Bookmark Application will be added later that will be displayed to users. 
      4. Click the Next button.
      5. On the Sign-On Options tab:
        1. In the Sign on methods section,
          1. Leave SAML 2.0 selected.
          2. Click the View Setup Instructions button to open the configuration page to display the settings that will be used in subsequent steps when creating the SSO Configuration in Mursion Portal.
        2. In the Advanced Sign-on Settings section,
          1. Environment: Select the appropriate Environment - Staging or Production.
          2. SSO Configuration ID: Leave this blank for now as it will be added in a later step.
        3. In the Credentials Details section,
          1. Application username format: Select  Email
        4. Click the Done button.
      6. Complete the steps in the following section to create a SSO Configuration in Mursion Portal.

      Create SSO Configuration in Mursion Portal

      1. Sign in to Mursion Portal.
      2. Select Settings on the top menu then select the SSO sub-tab.
      3. Click Create SSO Configuration.
      4. Please review this note about Claim fields, then, in the New SSO Configuration dialog, enter the following:
        1. Protocol: Select SAML 2.0.
        2. Configuration Name: Enter a descriptive name of your choice.
        3. Single Sign On Service Endpoint: Enter or copy and paste the Identity Provider’s Single Sign On Service Endpoint. 
        4. Logout Endpoint: Enter the following URL, replacing yourOktaDomain with your Okta domain - https://${yourOktaDomain}/login/signout.
        5. Entity ID: Enter or copy and paste the Identity Provider’s Entity ID.
        6. X.509 Certificate: Copy and paste the PEM formatted text of the Okta certificate that will be used to verify SAML responses.  Make sure to include the -----BEGIN CERTIFICATE----- header and
        7. -----END CERTIFICATE----- footer.
        8. Email Claim Name: Enter email.
        9. First Name Claim Name: Enter firstName.
        10. Last Name Claim Name: Enter lastName.
        11. Single Logout Enabled: Optionally, check this option to initiate a request to end the Okta user’s session when the user’s Mursion Portal session ends due to explicit logout or session timeout. 
        12. Team Claim Name: Optionally, to externally manage team assignment through a SAML user attribute, specify the name of the attribute that contains the value that should be used to assign users to a Mursion Portal team.
        13. Team Mapping: If a Team Clain Name is specified, click the Add + button to add a mapping. Select a Mursion Portal team from the Team drop-down. Enter the value of the attribute that should be mapped to the Portal team. To remove a mapping, click the x on the right of the mapping.
      5. Click Create SSO Configuration.
      6. Click the newly created SSO Configuration.
      7. On the Edit SSO Configuration dialog, 
        1. Copy the ID value which is the SSO Configuration ID. Save the SSO Configuration ID to be entered in the Mursion Okta app in a subsequent step.
        2. Copy the SP Initiated SSO URL. Save the URL to be entered in the Mursion Okta app in a subsequent step.
        3. Click the Cancel button to close the Edit SSO Configuration dialog.
      8. Complete the steps in the next section to add the SSO Configuration ID to the Mursion app in Okta.

      Add SSO Configuration ID to Mursion App

      1. In Okta, select the Mursion SAML app.
      2. Select the Sign On tab and click Edit.
      3. In the Advanced Sign-on Settings section,
        1. SSO Configuration ID: Paste the SSO Configuration ID that was copied from the SSO Configuration in Mursion Portal
      4. Click the Save button.
      5. Complete the steps in the following section to add a bookmark application for Mursion.

      Adding a Bookmark Application for Mursion

      1. Refer to the Bookmark Application documentation and add a Bookmark application for Mursion.
      2. On the General Settings tab:
        1. Application label: Enter Mursion as the label for the application.
        2. URL: Enter the SP Initiated SSO URL that was copied from Mursion Portal.
      3. Edit the Bookmark App’s logo and change it to the Mursion logo (right click and save as png):

      Mursion Logo