> For the complete documentation index, see llms.txt.
Skip to main content

Check out Port for yourself ➜ 

Okta

Follow this step-by-step guide to configure the integration between Port and Okta using a SAML application.

Port-Okta integration benefits​

  • Connect to the Port application via an Okta app.
  • Your Okta groups will be automatically synced with Port upon a user sign-in.
  • Set granular permissions on Port according to your Okta groups.

Register a new application​

  1. Sign in to your Okta Admin Console.

  2. Navigate to Applications and click on Applications again.

  3. Click on the Create App Integration button.

  4. In the pop-up, select SAML 2.0 and click on Next.

  5. In the General Settings, enter a name for the application and click on Next.

  6. On the Configure SAML page, under SAML Settings, fill in the following details based on your account region:

    Finding your connection name

    Your connection name follows the format company-<companyID>-SSO. You can find it in the Single Sign-On URL shown during the self-serve SSO setup flow. Look for the connection parameter in the URL.

    • Single sign on URL: https://auth.getport.io/login/callback?connection=company-<companyID>-SSO
    • Audience URI (SP Entity ID): urn:auth0:port-prod:company-<companyID>-SSO

  7. Scroll down to the Attribute Statements (Optional) section and add the following:

    • email, with the Value set to user.email
    • given_name, with the Value set to user.firstName
    • family_name, with the Value set to user.lastName
    • email_verified, with the Value set to true

  8. Click Next and then Finish to create the application.

Generate a certificate and configure the connection​

  1. In the Okta Admin Console, navigate to Applications, and select the newly created SAML application.

  2. Go to the Sign On tab and scroll down to the SAML Signing Certificates section.

  3. Click on Generate new certificate.

  4. In the dialog, specify the certificate details such as the name and duration, then click Generate.

  5. Download the certificate by clicking the Actions button next to the new certificate and selecting Download certificate. Choose the PEM format.

  6. In the Configure Connection section of the Port setup flow, provide your Okta credentials using one of the following options:

    • Automatic - paste your Okta metadata URL to auto-populate the connection settings.
    • Manual - upload the downloaded PEM certificate and enter the Single Sign-On login URL from your Okta application.

  7. In the same Configure Connection section, open Advanced settings and set the following:

    • Sign Request Algorithm: RSA-SHA256
    • Sign Request Algorithm Digest: SHA256
    • Protocol Binding: HTTP-Post
Direct access via URL

After configuring the SSO connection, you can initiate the login flow directly via URL. Use the following URL based on your account region, replacing company-<companyID>-SSO with your actual connection name. You can find your connection name in the Single Sign-On URL shown during the self-serve SSO setup flow - look for the connection parameter in the URL.

https://auth.getport.io/authorize?response_type=token&client_id=96IeqL36Q0UIBxIfV1oqOkDWU6UslfDj&connection=company-<companyID>-SSO&redirect_uri=https%3A%2F%2Fapp.port.io

Expose groups​

To expose your Okta groups to Port via the application, follow these steps:

  1. In the General tab of your Okta application, click Edit.

  2. Scroll down to the Group Attribute Statements section.

  3. Add a group attribute using the following settings:

    • Name: groups
    • Filter: Regex
    • Value: Use a regular expression that matches the groups you wish to send to Port (e.g., .* for all groups or a specific pattern).

  4. Save your changes.

These groups will be ingested into Port as teams, enabling you to manage user permissions and RBAC in your Port account.