This article will walk you through how to set up SSO for Intricately using the SAML 2.0 protocol and Okta.

Prerequisites

• You must be an Enterprise customer
• You must have access to SSO enabled for your plan. Contact us to get this set up!
• You must be a Team Admin.

Configuration Steps

Step 1 - Select Your SSO Protocol

1. Log in to your Intricately account.

2. Navigate to the user menu in the top right and select SSO Configuration.

   

3. Select SAML 2.0 as your SSO Protocol.

   

Step 2 - Get Your Single Sign-On URL and Audience URI

First, copy and save the Intricately information you'll need to provide to Okta configuration.

1. In the SSO Configuration form, copy and save the Single Sign-On URL:

   

2. Copy and save the Audience URI:

   

You'll need these in the next step.

Step 3 - Configure Settings in your Okta admin

1. Log in to your Okta admin dashboard.

2. In the sidebar menu, navigate to Applications → Applications and click the Create App Integration button.

   

3. Choose the SAML 2.0 option and click Next

   

4. You'll be redirected to a form with 3 steps: General Settings, Configure SAML and Feedback. First, fill in the name you want to give to your App Integration and hit Next.

   

5. Now you will add the Single Sign-On URL and Audience URI you have copied from Intricately's page.

   

6. On this same page, you will scroll down until you see the Attribute Statements section. Then you'll add the email attribute just like the image below and then you can hit Next.

   

7. Then you finish the App Integration creation filling up the Feedback info at will.

   

Step 4 - Get Your IdP XML Metadata

1. Still within your Okta dashboard, go to your App Integration page and find the Sign On tab.

2. You should click the View SAML setup instructions button on the right side of your screen.

   

3. You will be redirected to a page that you should scroll down to the bottom and copy the XML generated. Make sure you've copied the whole content and not only the first line.

   

4. The content should be similar to the image below.

   

5. Now, log back in to Intricately and open the SSO Configuration page. Paste the Metadata XML text into the configuration form.

   

6. Click SAVE CONFIGURATION. This will save the values you input-- without activating SSO for the team yet.

Step 5 - Set User Permissions

When SSO is enabled, you'll control who can access Intricately from your Okta. It's important to provision access before you activate SSO, to ensure that your team will be able to log in once SSO is active and required.

1. In your Okta dashboard, find the section Directory → Groups, where you can create a group or add an existing group to your integration.

   

2. Click in the group you want to give access and find the tab Applications and click Assign applications, assigning the App Integration you have just created for Intricately.

   

3. Make sure the users are assigned to the group you gave access to the application.

4. Return to Intricately's page.

Step 6 - Activate SSO

1. Ensure that you've completed all the setup steps above, including provisioning access to users.

2. Confirm that you're ready to activate SSO. Once you activate:

   • All users on the team will automatically be logged out of Intricately
   • Authentication via social login (Google, Salesforce, or LinkedIn) will be disabled for your team
   • All users will be required to authenticate to Intricately via SSO

3. Once you're sure you're ready to activate SSO, click the SSO Authentication toggle to turn it on:

   

Step 7 - Validate SSO

Test your configuration via the Intricately login process.

1. Ensure you are logged out. Then return to the Intricately web application through this link: https://my.intricately.com/login?sso=true
2. Enter your work email and hit Submit.
   • The web page will redirect to your Okta Org login page, if you don’t have an active Okta session in your browser. You can enter your Okta credentials and you will be redirected and signed in to Intricately Application.
   • If you have an active Okta session in your browser, then you will be seamlessly logged in to Intricately Application.

You've now successfully set up SSO for Intricately!