Enabling Single Sign-On (SSO) with Okta as your identity provider allows you to simplify authentication and login access to Cloudcraft.

This article helps you set up SSO if your identity provider is Okta. For other identity providers, see the following articles:

• Enable SSO With Azure AD
• Enable SSO With a Generic Identity Provider

For general information on using SSO with Cloudcraft, check out Enable SSO in Your Account.

Setting Up SAML/SSO

1. In Cloudcraft, navigate to User > Security & SSO.
2. The details you need to create a new application with Okta can be found in the Cloudcraft service provider details section.

3. Log in to Okta as an administrator.
4. Click Application.
5. Click Add Application, then click Create New App.
6. Select SAML 2.0 as the sign on method and click Create.
7. Enter Cloudcraft as the name of the application and leave the remaining values as-is.
8. Click Next.

9. Next, configure the SAML integration using the details provided by Cloudcraft. The fields are mapped as follows, with the first one being the label in Okta, and the second one being the label at Cloudcraft.
   • Single sign on URL: Assertion Consumer Service URL
   • Audience URI: Service Provider Entity ID

10. On the Name ID format dropdown, select EmailAddress.
11. Proceed to the next screen and select I’m an Okta customer adding an internal app to answer the question “Are you a customer or partner?”.
12. Click Finish. Now that the application is set up in Okta, you can assign your users to it and once you’re done, navigate to the Sign On tab.

13. Under the View Setup Instructions button, click the blue link to download the file required for upload to Cloudcraft.
14. Navigate back to Cloudcraft and upload your config file.

15. Toggle the SAML Single Sign-On is enabled option.
16. If you prefer to have your users access Cloudcraft only via your identity provider, enable the Strict mode option.