Skip to main content
This guide explains how to connect Yuno to Okta using SAML 2.0.

Prerequisites

  • An Okta account
  • Admin privileges in Okta to manage SSO settings and create applications (you’ll create the SAML application for Yuno in Step 1 below; no application needs to exist beforehand)
  • Access to the Yuno dashboard
1

Create a SAML application in Okta

In Okta, go to:Applications → Create App Integration → SAML 2.0 → NextSelect a name for your application and, optionally, upload a logo. You will then see the SAML configuration form.
Okta SAML Settings form showing the Single sign-on URL and Audience URI (SP Entity ID) fields to be filled in with Yuno values
2

Configure SAML settings using Yuno values

Open the Yuno dashboard, click your profile image, then open Security. Navigate to the Single Sign-On (SSO) tab, click Set up, and gather this info:
  • Identifier (Entity ID)
  • Assertion Consumer Service URL
Copy these values into the Okta SAML form:
  • Audience URI (SP Entity ID) → Identifier (Entity ID)
  • Single sign-on URL → Assertion Consumer Service URL
Click Next, then check the option This is an internal app…, and finish the setup.
Okta app creation wizard step 3 with the 'This is an internal app that we have created' checkbox selected before clicking Finish
3

Export and upload the metadata XML

In Okta, locate the Metadata URL under the application’s settings and open it. Save the file as metadata.xml.Then, in the Yuno dashboard:
  1. Upload the metadata.xml file under Yuno configuration → Option A: Upload metadata XML
  2. Wait for the Upload completed confirmation
  3. Click Save
Yuno dashboard SSO configuration screen showing Option A with the metadata XML file successfully uploaded
Alternatively, you can take the information listed in Option B and enter it manually.
4

Assign users in Okta (optional)

Once configuration is complete, you can assign Okta users or groups to the application so they can log in using SSO.

Troubleshooting

If you cannot set up the SSO connection or run into issues after initial configuration:
  • Yuno requires signed SAML responses, check:
    • Both the SAML response and the assertion are signed
    • The signing algorithm configured in Okta is SHA-256
    • The certificate used for signing matches the one included in the metadata
  • Review SSO logs in the Yuno dashboard under Security → Single sign-on (SSO)