Provider Specific SAML SSO Setup Guide for Okta, OneLogin and ADFS

This article includes provider-specific, step-by-step instructions for configuring SAML SSO in supported Identity Providers. Use this guide to complete the Identity Provider setup before returning to the main SAML SSO configuration article.

• Okta
• OneLogin
• ADFS

Configure SAML SSO with Okta

Follow these steps to configure SAML SSO using Okta:

1. Navigate to the Compliance Manager Admin → SAML SSO → Settings, and make a note:
   • Entity ID
   • ACS URL
2. Log in to the Okta Admin Console.
3. Go to Applications → Applications.
4. Click Create App Integration.
5. Select Web as the platform and SAML 2.0 as the sign-on method.
6. Click Next.
7. Enter an app name (for example, Healthicity) and click Next.
8. Configure SAML settings:
   • Single Sign-On URL: https://{subdomain}.compliancemanager.healthicity.com/saml/consume
   • Select Use this for Recipient URL and Destination URL
   • Audience URI (SP Entity ID): https://{subdomain}.compliancemanager.healthicity.com
   • Name ID Format: EmailAddress
   • Application Username: Email
9. Click Next, then Finish.

Obtain Okta Metadata

1. Open the application you created.
2. Go to the Sign On tab.
3. Click View Setup Instructions.
4. Copy the IdP metadata provided.
5. Return to the main SAML SSO article and continue with Step 4.

Configure SAML SSO with OneLogin

Follow these steps to configure SAML SSO using OneLogin:

1. Navigate to the Compliance Manager.
2. Download SP Metadata (recommended).
3. Note your Compliance Manager subdomain.
4. Log in to the OneLogin Admin Portal.
5. Go to Applications → Add App.
6. Search for and add the Healthicity application.
7. Open the application and go to the Configuration tab.
8. Enter your Compliance Manager subdomain.
9. Go to the Parameters tab and configure:
   • NameID = Email
10. Assign the application to users or roles.
11. Save the configuration.

Download OneLogin Metadata

1. In the application, click More Actions.
2. Select SAML Metadata.
3. Download and save the XML file.
4. Return to the main SAML SSO article and continue with Step 4.

Configure SAML SSO with ADFS

Follow these steps to configure SAML SSO using ADFS:

1. Navigate to the Compliance Manager.
2. Note the Entity ID.
3. Note the ACS URL.
4. (Optional) Download SP Metadata.
5. Log in to the server where ADFS is installed.
6. Open ADFS Management.
7. Select Relying Party Trusts.
8. Click Add Relying Party Trust.
9. Choose one of the following:
   • Import data from the SP Metadata file, or
   • Enter data about the relying party manually
10. If entering manually:
    • Enable SAML 2.0 WebSSO.
    • Enter the ACS URL.
    • Set the Relying Party Trust Identifier (Entity ID).
11. Complete the wizard.

Obtain ADFS Metadata

1. Access the federation metadata URL or export metadata from ADFS.
2. Save the metadata XML file.
3. Return to the main SAML SSO article and continue with Step 4.

© Healthicity, LLC