Configure SAML SSO between DigiCert and Okta
Use this procedure to configure single sign-on (SSO) between your DigiCert® account and Okta using Security Assertion Markup Language (SAML) 2.0.
To set up this sign in method, you need to switch between two tabs, DigiCert and Okta, to exchange metadata.
For more details about Okta configuration, refer to Okta Help Center.
Before you begin
To finish this setup, you need administrative access in both DigiCert and Okta:
Account admin user group required in DigiCert account.
Application Administrator or equivalent role required in Okta.
Access DigiCert's SAML configuration page and copy the SSO URL:
In DigiCert® account, select the Accounts icon > sign in methods.
Select Single sign-on with SAML.
In the Connect DigiCert to your IdP section, copy the SSO URL.
Leave this tab open.
In another tab, create a SAML application for your DigiCert account in Okta:
Sign in to your Okta admin dashboard.
Go to Applications > Applications.
Select Create App integration:
Select SAML 2.0 as the Sign-on method.
Select Next.
Enter DigiCert® account as the App name.
Optional: Add a logo to the App logo field.
On the Configure SAML tab, finish the following fields:
Enter the SSO URL that you copied in Step 1 into both of the following fields:
Single sign-on URL
Audience URI (SP Entity ID)
In the Name ID Format field, select Email address.
In the Application username field, select Email.
Select Next.
Select Finish.
Create the Okta metadata file that you need to provide to DigiCert in Step 3:
Select the Sign On tab > View SAML setup instructions.
In the Optional section, copy the IdP metadata.
Enter the IdP metadata into a notepad and save the file in
.xmlformat.
Leave this tab open.
Back in your DigiCert® account tab, upload the Okta metadata that you created in Step 2 and enable SSO:
In the Connect your IdP to DigiCert section, select Upload metadata.
In the Enable/Disable SSO with SAML section, switch to enable SSO.
Select Save configuration.
Ensure that all users in your DigiCert account are assigned to the SAML application in Okta Admin dashboard:
Go to Applications > Applications.
Select DigiCert account app you created.
Select the Assignments tab.
Select Assign > Assign People.
Next to the user's name, select Assign.
Select Save and Go Back.
Select Done.
Verify that you’re able to sign in using your SAML application from Okta Admin dashboard:
Select ∷ > My end user dashboard.
Select the DigiCert account app that you created.
Tip
Your SAML app is configured correctly if you’re redirected to your DigiCert account and asked to finish two-factor authentication (2FA).
Not redirected to the 2FA page in your DigiCert account? Compare your SAML app settings to these instructions or contact DigiCert Support for assistance.
DigiCert logos
Use of DigiCert's logo must at all times comply with DigiCert brand guidelines, including the DigiCert Trademark Usage Guidelines available at https://www.digicert.com/legal-repository/ (as updated from time to time).
DigiCert logos for SSO configuration.