Okta as IdP for wordpress

Step 1: Setup Okta as IDP (Identity Provider)

Follow the steps below to configure Okta as IdP

• In the miniOrange SAML SP SSO plugin, navigate to Service Provider Metadata tab. Here, you can find the SP metadata such as SP Entity ID and ACS (AssertionConsumerService) URL which are required to configure the Identity Provider.

• Log in to your Okta dashboard.
• You will be presented with following screen. Click on Developer Console arrow and select Classic UI from the navigation bar on top.

• Go to Applications -> Applications.

• You will get the following screen. Click on Add Application button.

• Now,click on Create New App button to create an app.

• Choose Web as platform, SAML 2.0 as Sign on method and click on Create button.

• In General Settings, enter App Name and click on Next button.

• In SAML Settings, enter the following:

Single Sign On URL	Enter ACS (AssertionConsumerService) URL from the Service Provider metadata tab of the module.
Audience URI (SP Entity ID)	Enter SP Entity ID / Issuer from the Service Provider Metadata tab of the module.
Default Relay State	Enter Relay State from the Service Provider Metadata tab of the module.
Name ID Format	Select E-Mail Address as a Name Id from dropdown list.
Application Username	Okta username.


• Configure Group Attribute Statement (Optional) and click on Next button.

• If you have integrated your Active Directory in Okta and want to map the AD groups, please make sure that you have added the OUs used to import groups.You will also need to map the memberOf
  attribute under the integrated directory’s configuration.