Using Okta to protect your hub

Okta, as a SAML 2.0 IDp service can be connected to your StatusHub to help keep your hub private.

To configure this, you will need to follow these steps inside your Okta account:

1. Log in to your Okta organisation as a user with administrative privileges.

   If you don’t have an Okta organisation, you can create a free Okta Developer Edition organisation here: https://www.okta.com/developer/signup/

2. Click on the blue “Admin” button

3. Click on the “Add Applications” shortcut

4. Click on the green “Create New App” button

5. In the dialogue that opens, select the “SAML 2.0” option, then click the green “Create” button

6. In Step 1 “General Settings,” enter “StatusHub” in the “App name” field, then click the green “Next” button.

7. In Step 2 “Configure SAML.”

   • Paste the URL below into the “Single sign-on URL” and “Audience URI (SP Entity ID)” fields:

     https://cognetoweb.statushub.io/saml/authenticate
     

   • Click “Show Advanced Settings.”

     Change the value of “Request compression” to “Compressed.”

   • In the “Attribute Statements” section, add three attribute statements:
     1. “FirstName” set to “${user.firstName}”
     2. “LastName” set to “${user.lastName}”
     3. “Email” set to “${user.email}”
   • Then click the green “Next” button

   

8. In Step 3 “Feedback,” click the checkbox next to the text “This is an internal application that we created,” then click the green “Finish” button.

9. You will now see the “Sign-On” section of your newly created “StatusHub” application.

10. Keep this page open in a separate tab or browser window. You will need to return to this page later in this guide and paste the contents of the XML metadata.
    

11. In the 'Settings' subsection, locate the SAML 2.0 checkbox and click the link beneath it that says, "SAML 2.0 setup instructions for StatusHub."

12. The necessary information is at the bottom of the new page under the section 'Configuration Data'.

13. The needed info for StatusHub to complete the connection is in block 1-3. Alternatively, the IDP metadata in block 4 contains the information as well and can be saved as an XML file (i.e. IDP.XML), which you can paste into the StatusHub configuration: