Getting started (admin setup)

Setup Single Sign-on with Okta SAML application

1. Sign in to your Okta admin portal
2. In the left menu bar, click on Applications tab

3. Click on Create App Integration

4. In the pop-up select SAML 2.0 and click on Next

5. In the Create SAML Integration page, provide a name to the application and click Next

6. At this point you will need the following details from the Anchor admin dashboard
   1. Single sign-on URL
   2. Audience Restriction
7. Login to Anchor admin dashboard : https://admin.anchormydata.com
8. Click on Settings -> Security -> Identity & Provisioning

9. Click on SAML SSO tab
10. Click on Add new SAML SSO -> Setup Okta SAML SSO

11. A pop-up window will appear with the following details. Copy Single Sign On URL and Audience Restriction and click Next

12. Paste the copied Single Sign On URL and Audience Restriction into Okta SAML settings page.

13. In the Attribute Statements (optional) add the following values. Avoid spelling mistakes.

14. In the Group Attribute Statements (optional) add the following value. Avoid spelling mistakes.

15. Click on Next and select the following options.

16. Click Finish.
17. The app is successfully created now. Now click on Sign On tab.

18. You need the Sign on URL, Sign out URL and the X509 certificate from the Okta portal to finish the setup on Anchor admin dashboard. Follow the video below to finish the setup.

19. If the setup is successful then you will see the following pop-up.

20. Its time to assign users to the newly created Okta SAML app.

Adding users to newly created Okta SAML SSO app

1. Login to Okta admin portal.
2. Go to Applications tab and click on the newly created app anchor-saml-sso-app.
3. Click on Assignments tab.
4. Click on Assign and in the dropdown select Assign to People.
5. Click on Assign beside the name of the user. This will add the user to the newly created SAML app.

How to verify SSO sign-in with the newly added SAML SSO?

1. Make sure that your email domain is part of the Anchor primary domains.

2. Make sure your email is added to the Okta SAML SSO app.
3. Add/promote the user as an Admin in the Anchor admin dashboard.

4. Now sign-out and sign back in to the Anchor admin dashboard with SSO.
5. Go to https://admin.anchormydata.com. Enter your organization ID. Enter the email, you will be presented with 2 options:
   1. Continue with Email
   2. Continue with SSO
6. Choose Continue with SSO to sign-in with your newly added Okta SAML SSO

Common mistakes

1. User is not assigned to the Okta SAML SSO app