Okta provides cloud software that helps companies manage and secure user authentication into applications, and for developers to build identity controls into applications, website web services and devices. webinar.net's Okta SAML SSO integration is an XML-based standard for exchanging authentication and authorization data between the identity provider (IdP) Okta, and webinar.net, allowing for a Single Sign-On (SSO) experience.
Create Okta App Integration
The integration with Okta starts with the creating of Okta App Integration.
Open your Admin Dashboard, click on 'Applications', then click ‘Create App Integration’, on the dialog window, select SAML 2.0.
SAML Settings
On step 2 Configure SAML, use the following value for each fields.
Single sign-on URL
Note: If you are setting up an app for testing on webinar.net stage sandbox, use https://identity.webinarstage.net/saml/sso.
Audience URI (SP Entity ID)
net.webinar:sp
Note: If you are setting up an app for testing on webinar.net stage sandbox, use net.webinarstage:sp.
Default RelayState
Leave it blank
Name ID format
EmailAddress
Application username
Response
Signed
Assertion Signature
Signed
Signature Algorithm
RSA-SHA256
Digest Algorithm
SHA256
Assertion Encryption
Encryption
Encryption Algorithm
AES256-CBC
Key Transport Algorithm
RSA-OAEP
Encryption Certificate
Download the certificate from here https://cdn.webinar.net/saml-certificates/webinar.net.cer.
Note: If you are setting up an app for testing on webinar.net stage sandbox, use
Signature Certificate
Not required
Signed Requests
No
Okta has a bug that causes unable to use signed requests.
Assertion Inline Hook
None (Disabled)
Authentication context class
X.509 Certificate
Honor Force Authentication
Yes
SAML Issuer ID
ATTRIBUTE STATEMENTS
Name | Name Format | Value |
FirstName | Unspecified | user.firstName |
LastName | Unspecified | user.lastName |
Provide IdP Metadata to webinar.net
After saving the app, go to the Sign On tab, under the Settings section -> SAML 2.0, copy Metadata URL and send it to the webinar.net team for setting up IdP metadata on the webinar.net side.
Enable SAML SSO for Audience
On webinar.net side, if SAML SSO for audiences is included in your subscription, you will see the 'Enable SAML Single-Sign-On' checkbox on the Create Webinar page. Enable this option will limit the access of the webinar via SAML SSO only. Registrations will be disabled accordingly.
For further assistance, contact us through chat or send us an email at support@webinar.net.