How to configure Okta SSO in Supermetrics

This guide explains how to configure your Okta Workforce Identity Cloud to enable single sign-on (SSO) for Supermetrics using SAML 2.0. This allows your team members to access Supermetrics with their enterprise credentials.

For more information, see also Okta's instructions on adding Okta SAML applications.

Before you begin

Before you can configure your Okta Workforce Identity Cloud for logging in to Supermetrics, you need the following:

• An Okta Workforce Identity Cloud account with administrative privileges.
• Supermetrics SAML configuration details (you can get these details by contacting Supermetrics support):
  • Assertion Consumer Service URL (ACS URL): The URL where Okta will send the SAML assertion.
  • Entity ID: Unique identifier for Supermetrics as a service provider. 

    Important: Treat the entity ID value as-is and do not change it (such as by adding trailing slashes). While the entity ID looks like a URL, it's a URI and must not be modified.

  • Start URL: The URL where users will be redirected after successful authentication.

Instructions

Step 1: Create a new Okta app

1. Log in to your Okta admin console.
2. Navigate to Applications → Applications.
3. Click Create App Integration.
4. Select SAML 2.0 as the application sign-on method.
5. Give the application a meaningful name, such as "Supermetrics".
6. Configure the SAML settings:
   1. Single sign-on URL: Enter the Assertion Consumer Service URL.
   2. Audience URI (SP Entity ID): Enter the Entity ID.
   3. Default RelayState: Enter the Start URL.
   4. Name ID Format: Select EmailAddress.
   5. Application Username: Select Email.
7. Click Next, and finish creating the app.

Step 2: Assign users to the new app

On the Assignments tab of the app page, you can assign the app to specific users and groups.

On the same page, you can also find Self Service configuration. With that, you can allow users to use Supermetrics with their credentials with or without admin approval, without manual assignments.

Step 3: Share SAML metadata with Supermetrics

On the Sign On tab of the app page, you can find the Metadata URL for SAML 2.0. Please copy the Metadata URL and share it with Supermetrics.

Step 4: Test the integration

After Supermetrics confirms that your metadata file has been received and processed, you can test the integration.

1. Have a user access the Supermetrics Hub. The user should be redirected to the Okta sign-in page, where they can authenticate using their Okta Workforce Identity credentials. After successful authentication, the user should be redirected to Supermetrics.
2. Once the user is logged in to Supermetrics, verify that the user in the top-right corner of the Supermetrics Hub UI matches their selected Okta Workforce identity.