> For the complete documentation index, see [llms.txt](https://docs.deltastream.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.deltastream.io/enterprise-security-integrations/okta-saml-integration.md).

# Okta SAML Integration

SAML (Security Assertion Markup Language) is an open standard for exchanging security information and providing single sign-on (SSO) between 2 parties: an identity provider (IdP) and a service provider (SP).

This document walks you through setting up SAML-based authentication between DeltaStream (SP) and [Okta (IdP)](https://developer.okta.com/docs/concepts/saml/).

Find the Okta documentation for configuring the SAML integration at <https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_saml.htm>

### Initial Okta Setup

1. Log into your Okta dashboard. Then from the applications menu click **Create App Integration**.

<figure><img src="/files/X6u3SBgI5NWfoxYhO3SS" alt="" width="375"><figcaption><p>New app integration</p></figcaption></figure>

2. For the sign-in method, click **SAML 2.0** and then click **Next**.

<figure><img src="/files/8zG7Ig9J5vyIhG4oiApa" alt="" width="375"><figcaption><p>SAML 2.0</p></figcaption></figure>

3. Update the **General Settings** for the DeltaStream app integration. Optionally, also set up the [DeltaStream Logo](http://deltastream-static-assets.s3-website-us-west-2.amazonaws.com/LogoVertical.png) for your application.

<figure><img src="/files/u3S7RUd7EPCtcwq8R7Vh" alt="" width="375"><figcaption></figcaption></figure>

4. Set up the SAML integration with the following values:

{% hint style="warning" %}
**Important** You must retain the default values for any setting not mentioned below.
{% endhint %}

#### General settings

<table><thead><tr><th width="256">Field</th><th>Value</th></tr></thead><tbody><tr><td>Single sign-on URL</td><td><code>https://auth.deltastream.io/login/callback?connection=ds-okta-saml-placeholder</code></td></tr><tr><td>Audience URI</td><td><code>urn:auth0:deltastream:ds-okta-saml-placeholder</code></td></tr><tr><td>Name ID format</td><td><code>EmailAddress</code></td></tr><tr><td>Application Username</td><td><code>Email</code></td></tr><tr><td>Update application username on</td><td><code>Create and update</code></td></tr></tbody></table>

#### Attribute Statements

Click **Add another** and add the following mappings:

<table><thead><tr><th width="256">Name</th><th width="137">Name format</th><th>Value</th></tr></thead><tbody><tr><td>email</td><td>Basic</td><td><code>user.email</code></td></tr><tr><td>firstName</td><td>Basic</td><td><code>user.firstName</code></td></tr><tr><td>lastName</td><td>Basic</td><td><code>user.lastName</code></td></tr></tbody></table>

The screenshot below provides a visual reference. Enter the required values and then click **Next**.

<div align="center"><figure><img src="/files/ZTreaKPaJzgxhQrqyR0C" alt="" width="375"><figcaption></figcaption></figure></div>

5. Contact DeltaStream at [ops@deltastream.io](mailto:http://deltastream-static-assets.s3-website-us-west-2.amazonaws.com/LogoVertical.png) and provide the following information:

* Your company's name
* Your company's email domain
* First Org admin's email address (you can add more later)
* Saml 2.0 Metadata URL

Navigate to the SAML Application `Sign On` tab for the values for Metadata URL. Do not use values from the `General` tab.

### Complete Okta Setup

After the integration is complete, DeltaStream provides you with the final **Audience URI,** which you must update in Okta. To do this:

1. Log into your OKTA dashboard. Then, from the **applications** menu, click **DeltaStream**.

<figure><img src="/files/cnuiBYDay2RxxDTHY8DO" alt="" width="375"><figcaption></figcaption></figure>

2. Click to activate the **General** tab. Then, for **SAML Settings**, click **Edit**.<br>

   <figure><img src="/files/ePz7cn7ZddHt7fEKXBNr" alt="" width="371"><figcaption></figcaption></figure>
3. On the **General Settings** page, click **Next**.

<figure><img src="/files/ZeVCGNAI86HJiwfZirVu" alt="" width="375"><figcaption></figcaption></figure>

4. Update the **Single sign-on URL** with the value DeltaStream provides you.
5. Update the **Audience URI (SP Entity ID)** with the value DeltaStream provides you.
6. Click **Next** and **Finish** to complete editing the Okta integration.

## References

* <https://help.okta.com/en-us/content/topics/provisioning/lcm/con-okta-prov.htm>
* <https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_saml.htm>