# Okta SAML Integration

SAML (Security Assertion Markup Language) is an open standard for exchanging security information and providing single sign-on (SSO) between 2 parties: an identity provider (IdP) and a service provider (SP).

This document walks you through setting up SAML-based authentication between DeltaStream (SP) and [Okta (IdP)](https://developer.okta.com/docs/concepts/saml/).

Find the Okta documentation for configuring the SAML integration at <https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_saml.htm>

### Initial Okta Setup

1. Log into your Okta dashboard. Then from the applications menu click **Create App Integration**.

<figure><img src="https://1288764042-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdbd9e6ZJodkgF1H6AVay%2Fuploads%2Fgit-blob-f98942e8bcf9c3a4584b0ff0bdfc99237ed0019e%2F0.%20new%20app%20integration.png?alt=media" alt="" width="375"><figcaption><p>New app integration</p></figcaption></figure>

2. For the sign-in method, click **SAML 2.0** and then click **Next**.

<figure><img src="https://1288764042-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdbd9e6ZJodkgF1H6AVay%2Fuploads%2Fgit-blob-1242f3ddf0ea2e301fbceeee7c43fe7364f90315%2F1.%20create%20new%20app%20integration.png?alt=media" alt="" width="375"><figcaption><p>SAML 2.0</p></figcaption></figure>

3. Update the **General Settings** for the DeltaStream app integration. Optionally, also set up the [DeltaStream Logo](http://deltastream-static-assets.s3-website-us-west-2.amazonaws.com/LogoVertical.png) for your application.

<figure><img src="https://1288764042-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdbd9e6ZJodkgF1H6AVay%2Fuploads%2Fgit-blob-db92796f31e998b7ed67dbbe0179f20ac21e40dd%2F2.%20create%20saml%20integration%20-%20general%20settings.png?alt=media" alt="" width="375"><figcaption></figcaption></figure>

4. Set up the SAML integration with the following values:

{% hint style="warning" %}
**Important** You must retain the default values for any setting not mentioned below.
{% endhint %}

#### General settings

<table><thead><tr><th width="256">Field</th><th>Value</th></tr></thead><tbody><tr><td>Single sign-on URL</td><td><code>https://auth.deltastream.io/login/callback?connection=ds-okta-saml-placeholder</code></td></tr><tr><td>Audience URI</td><td><code>urn:auth0:deltastream:ds-okta-saml-placeholder</code></td></tr><tr><td>Name ID format</td><td><code>EmailAddress</code></td></tr><tr><td>Application Username</td><td><code>Email</code></td></tr><tr><td>Update application username on</td><td><code>Create and update</code></td></tr></tbody></table>

#### Attribute Statements

Click **Add another** and add the following mappings:

<table><thead><tr><th width="256">Name</th><th width="137">Name format</th><th>Value</th></tr></thead><tbody><tr><td>email</td><td>Basic</td><td><code>user.email</code></td></tr><tr><td>firstName</td><td>Basic</td><td><code>user.firstName</code></td></tr><tr><td>lastName</td><td>Basic</td><td><code>user.lastName</code></td></tr></tbody></table>

The screenshot below provides a visual reference. Enter the required values and then click **Next**.

<div align="center"><figure><img src="https://1288764042-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdbd9e6ZJodkgF1H6AVay%2Fuploads%2Fgit-blob-d15da6b7b6cad0d1cc5eec03ae60967552c6216f%2F3.%20create%20saml%20integration%20-%20configure%20saml.png?alt=media" alt="" width="375"><figcaption></figcaption></figure></div>

5. Contact DeltaStream at [ops@deltastream.io](mailto:http://deltastream-static-assets.s3-website-us-west-2.amazonaws.com/LogoVertical.png) and provide the following information:

* Your company's name
* Your company's email domain
* First Org admin's email address (you can add more later)
* Saml 2.0 Metadata URL

Navigate to the SAML Application `Sign On` tab for the values for Metadata URL. Do not use values from the `General` tab.

### Complete Okta Setup

After the integration is complete, DeltaStream provides you with the final **Audience URI,** which you must update in Okta. To do this:

1. Log into your OKTA dashboard. Then, from the **applications** menu, click **DeltaStream**.

<figure><img src="https://1288764042-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdbd9e6ZJodkgF1H6AVay%2Fuploads%2Fgit-blob-feb075add902ebf229460512b71f4e1eaea5eebb%2F5.%20select%20deltastream%20app%20integration.png?alt=media" alt="" width="375"><figcaption></figcaption></figure>

2. Click to activate the **General** tab. Then, for **SAML Settings**, click **Edit**.<br>

   <figure><img src="https://1288764042-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdbd9e6ZJodkgF1H6AVay%2Fuploads%2Fgit-blob-37acac394894d5566e2bca911e28a2326c84eb67%2F6.%20edit%20saml%20settings.png?alt=media" alt="" width="371"><figcaption></figcaption></figure>
3. On the **General Settings** page, click **Next**.

<figure><img src="https://1288764042-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdbd9e6ZJodkgF1H6AVay%2Fuploads%2Fgit-blob-0837320a465e845d3d8cf1db7719c35ffd5a28a8%2F7.%20edit%20saml%20settings%20-%20general%20settings.png?alt=media" alt="" width="375"><figcaption></figcaption></figure>

4. Update the **Single sign-on URL** with the value DeltaStream provides you.
5. Update the **Audience URI (SP Entity ID)** with the value DeltaStream provides you.
6. Click **Next** and **Finish** to complete editing the Okta integration.

## References

* <https://help.okta.com/en-us/content/topics/provisioning/lcm/con-okta-prov.htm>
* <https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_saml.htm>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.deltastream.io/enterprise-security-integrations/okta-saml-integration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.