Okta SSO Guide

​

Prerequisites

• An Okta account
• An application for use with Yuno
• Admin privileges in Okta to manage SSO settings
• Access to the Yuno dashboard

1

Create a SAML application in Okta

In Okta, go to:Applications → Create App Integration → SAML 2.0 → NextSelect a name for your application and, optionally, upload a logo. You will then see the SAML configuration form.

2

Configure SAML settings using Yuno values

Open the Yuno dashboard, click your profile image, then open Security. Navigate to the Single Sign-On (SSO) tab, click Set up, and gather this info:

• Identifier (Entity ID)
• Assertion Consumer Service URL

Copy these values into the Okta SAML form:

• Audience URI (SP Entity ID) → Identifier (Entity ID)
• Single sign-on URL → Assertion Consumer Service URL

Click Next, then check the option This is an internal app…, and finish the setup.

3

Export and upload the metadata XML

In Okta, locate the Metadata URL under the application’s settings and open it. Save the file as metadata.xml.Then, in the Yuno dashboard:

1. Upload the metadata.xml file under Yuno configuration → Option A: Upload metadata XML
2. Wait for the Upload completed confirmation
3. Click Save

Alternatively, you can take the information listed in Option B and enter it manually.

4

Assign users in Okta (optional)

Once configuration is complete, you can assign Okta users or groups to the application so they can log in using SSO.

​

Troubleshooting

• Yuno requires signed SAML responses, check:
  • Both the SAML response and the assertion are signed
  • The signing algorithm configured in Okta is SHA-256
  • The certificate used for signing matches the one included in the metadata
• Review SSO logs in the Yuno dashboard under Security → Single sign-on (SSO)