title | shortTitle | intro | product | versions | topics | redirect_from | |||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Configuring SAML single sign-on with Okta for Enterprise Managed Users |
Configure SAML on Okta |
Learn how to configure Okta for {% data variables.product.prodname_emus %} on {% data variables.product.prodname_dotcom_the_website %} or {% data variables.enterprise.data_residency_site %}. |
{% data reusables.gated-features.emus %} |
|
|
|
Warning
Enabling SAML affects all members of your enterprise.
{% data variables.product.prodname_emus %} doesn't provide a backup sign in URL where members of your enterprise can sign in using their regular username and password. If you are unable to sign in, contact {% data variables.contact.enterprise_support %} via the {% data variables.contact.contact_enterprise_portal %} for assistance.
The {% data variables.product.prodname_emu_idp_application %} application on Okta supports SP-initiated SSO and IdP-initiated SSO.
-
Install the Okta application for your environment.
- For {% data variables.product.prodname_dotcom_the_website %}, install the {% data variables.product.prodname_emu_idp_application %} application.
- For {% data variables.enterprise.data_residency_site %}, install the {% data variables.product.prodname_emu_idp_application %} - {% data variables.enterprise.data_residency_site %} application.
-
In the application on Okta, click the Assignments tab and assign the application to your Okta account.
-
Click the Sign on tab.
-
Next to "Enterprise Name," type the name of your {% data variables.enterprise.prodname_emu_enterprise %}.
[!NOTE] For example, if you sign in to
github.com/enterprises/octocorp
or{% data variables.enterprise.data_residency_example_domain %}
, your enterprise name isoctocorp
. -
On the "Sign on" tab, under "SAML 2.0," click More details.
-
In order to configure your enterprise on {% data variables.product.github %} later, note down the following items:
- "Sign on URL"
- "Issuer"
- "Signing certificate"
- Sign in to your {% data variables.enterprise.prodname_emu_enterprise %}.
- Using the details you noted from Okta, follow the steps in AUTOTITLE.
After you enable SAML SSO, enable provisioning. For more information, see AUTOTITLE.