Configure Okta SAML SSO for Jericho Security Admins
This page walks you through creating a SAML 2.0 app integration in Okta and configuring it to work with Jericho Security. At the end of the process, you will share a set of metadata values with your Jericho technical contact so they can enable SSO for your tenant.
Log into Okta with administrator permissions
Section titled “Log into Okta with administrator permissions”Sign in to your Okta instance using an account that has administrator permissions.
Enter administrator mode
Section titled “Enter administrator mode”Click the Admin button at the top of the page to switch into administrator mode.
Open the Applications panel
Section titled “Open the Applications panel”In the left menu, click Applications to expand it, then click Applications again to open the Applications panel.
Create a new app integration
Section titled “Create a new app integration”Click Create App Integration.
Select SAML 2.0 as the sign-in method
Section titled “Select SAML 2.0 as the sign-in method”Select SAML 2.0 as the sign-in method, then click Next.
Name the application
Section titled “Name the application”Enter a name for the application — for example, Jericho Security Admin SSO — then click Next.
Set the Single sign-on URL
Section titled “Set the Single sign-on URL”Set Single sign-on URL to Jericho’s SAML ACS endpoint:
https://app.jerichosecurity.com/users/saml/authConfirm the Recipient and Destination URLs
Section titled “Confirm the Recipient and Destination URLs”Ensure Use this for Recipient URL and Destination URL is checked.
Set the Audience URI (SP Entity ID)
Section titled “Set the Audience URI (SP Entity ID)”Set Audience URI (SP Entity ID) to the value agreed with your Jericho technical contact — for example, jericho-saml-admin. Make a note of this value — you will need to send it to your Jericho technical contact.
Set the Name ID format
Section titled “Set the Name ID format”Set Name ID format to EmailAddress.
Set the Application username
Section titled “Set the Application username”Set Application username to Email.
Add an email attribute statement
Section titled “Add an email attribute statement”Under Attribute Statements, add a new entry with the following values:
| Field | Value |
|---|---|
| Name | email |
| Name format | Unspecified |
| Value | user.email |
Complete the integration wizard
Section titled “Complete the integration wizard”Click Next. Optionally fill out the feedback form, then click Finish.
Send configuration values to your Jericho technical contact
Section titled “Send configuration values to your Jericho technical contact”On the application’s Sign On tab, expand More details and send the following values to your Jericho technical contact:
- The Audience URI (SP Entity ID) you set earlier
- Metadata URL
- Issuer
- Sign on URL
Verify access
Section titled “Verify access”Assign a test user to the identity-provider app and ensure their SAML email matches their Jericho account. An app assignment alone does not grant a Jericho Manager or Admin role; arrange the corresponding Jericho invitation with your administrator. Test sign-in after your technical contact confirms the SAML configuration is complete.
Vendor reference: Okta SAML field reference.