Skip to main content

Configure SAML 2.0 SSO

To enable SAML Single Sign-On (SSO) with Louper, please create a new SAML 2.0 application in Okta, and provide the required SAML configuration details.

Okta Configuration​

Step 1: Create a New Application Integration​

  1. Log in to the Okta Admin Dashboard.
  2. Navigate to Applications → Applications.
  3. Click Create App Integration.
  4. Select:
    • Sign-in method: SAML 2.0
    • Click Next

Step 2: Configure SAML Settings​

Configure the following values:

SettingValue
Single sign-on URLhttps://auth-prod.louper.io/__/auth/handler
Audience URI (SP Entity ID)https://auth-prod.louper.io
Application UsernameEmail

Complete the remaining setup steps and save the application.

Step 3: Configure Attribute Statements​

Louper requires the following SAML attribute mappings:

NameName FormatValue
firstNameUnspecifieduser.firstName
lastNameUnspecifieduser.lastName

To define attribute statements using the legacy configuration:

  1. Click Applications → Applications and select your SAML application.
  2. Open the Sign On tab.
  3. In Attribute Statements, expand Show legacy configuration.
  4. Click Edit.
  5. Add the following attribute statement:
    • Name: firstName
    • Name format: Unspecified
    • Value: user.firstName
  6. Click Add Another and add:
    • Name: lastName
    • Name format: Unspecified
    • Value: user.lastName
  7. Save the configuration.

Information Required from Your SAML Application​

After the SAML application has been created, please provide the following values to Louper:

1. Entity ID (Issuer)​

In Okta, this is typically labeled Issuer.

Example:

http://www.okta.com/exk13siize1mzKjWn698

2. Single Sign-On URL (SSO URL)​

In Okta, this is typically labeled Sign On URL.

Example:

https://trial-3959017.okta.com/app/trial-3959017_shroom_1/exk13siize1mzKjWn698/sso/saml

3. Signing Certificate​

Provide the X.509 signing certificate used to sign SAML assertions.

The certificate must be provided in PEM format and should:

  • Begin with:
-----BEGIN CERTIFICATE-----
  • End with:
-----END CERTIFICATE-----

Example:

-----BEGIN CERTIFICATE-----
MIID...
...
-----END CERTIFICATE-----

This certificate is used by Louper to validate and verify SAML assertions issued by your Identity Provider.

note

The Enforce SAML SSO option will become available for your team once you've provided your SAML configuration details to Louper.

note

In order to enforce the configured SAML 2.0 SSO authentication method, see Enforcing Single Sign-On (SSO) methods