Skip to main content

How to Configure OKTA for Labra Integration

Rishabh Gautam
Updated

Okta SSO: Step-by-Step Configuration

This guide walks you through configuring Okta as your Identity Provider (IdP) to enable Single Sign-On (SSO) for your Labra account using SAML 2.0.

 

Before You Start

Please make sure you have:

  • Access to your Okta admin/developer account
  • Your Auth0 domain and connection name (provided by Labra)
  • Admin access to assign users or groups in Okta

 

In Okta (IdP Side)

➡️  Step 1: Create a New App Integration

  1. Log in to your Okta developer account
  2. On the left side panel, go to Applications → Applications
  3. Click Create App Integration
  4. Select SAML 2.0 as the sign-in method
  5. Click Next

Fig. 1

 

Fig. 2

 

➡️  Step 2: Configure General Settings

  1. Enter a name for your app (e.g., "Labra SSO")
  2. Optionally upload a logo
  3. Click "Next"

Fig. 3

 

 

➡️  Step 3: Configure SAML Settings

Fill in the following fields:

a. Single Sign-On URL (ACS URL) Get this value from Auth0. It will follow this format: To be provided by Labra on the configuration Call

https://YOUR_AUTH0_DOMAIN/login/callback?connection=<connection_name>

b. Audience URI (SP Entity ID) Use the following format:

urn:auth0:YOUR_TENANT:<connection_name>

Example values:

  • ACS URL: https://accounts.labra.io/login/callback?connection=Labra-c8ecc95d-a55f-414d-897a-290fe9abf960
  • Audience URI: urn:auth0:labra:Labra-c8ecc95d-a55f-414d-897a-290fe9abf960
  1. Click Next

Fig. 4

 

➡️  Step 4: Complete Setup and Assign Users

  1. Click Finish to complete the SAML configuration
  2. Go to the Assignments tab
  3. Click Assign and add the relevant users or groups to this app

Fig. 5

 

➡️  Step 5: Map Attribute Statements

In the SAML settings, map the following attributes so user information is passed correctly:

NameValue
emailuser.email
given_nameuser.firstName
family_nameuser.familyName

 

Fig. 6

 

 

➡️  Step 6: Retrieve IdP Details for Labra Configuration

  1. Go to the Sign On tab
  2. Click View SAML Setup Instructions
  3. Copy the Identity Provider Single Sign-On URL — you'll need this to configure your OKTA with the Labra SAML connection
  4. Download the X.509 Certificate and share with your Labra Onboarding Specialist.

Fig. 7

Fig. 8

 

Related articles