Okta SSO Setup

Log in to your Okta admin portal, Applications -> Create App Integration 

Choose SAML 2.0 and click on Next

In General settings, input the App Name (Optional: EasyDMARC) and click on Next

 

Under the “Configure SAML” tab, type in:
Single sign-on URL: https://uac.easydmarc.com/realms/easydmarc/broker/sso_d0ffe442-c7b3-40fa-bce0-17b9125cc580_172286792xxxx/endpoint/clients/saml_app

 

Please note: The URL provided above is just an example—it's used only to obtain the Metadata File from Okta. After that, make sure to replace it with the specific URL that will be supplied by EasyDMARC.

Audience URI (SP Entity ID): https://uac.easydmarc.com/realms/easydmarc

 

Click on Next, and Finish

After this, you will get this window where you can see the Metadata URL

Copy the Metadata URL, head to your EasyDMARC Security portal, and click on Setup.

Confirm your Domain Ownership 

Make sure to add the provided TXT record to your DNS zone. Once added, click on the Verify button.

 

Note: DNS propagation may take up to several hours.

Now Paste the Metadata URL and click on Validate and Save

Important Note: In case you want to enforce SSO for all users, make sure to disable any OAuth logins by heading to Linked Accounts (Google, Microsoft, LinkedIn), and then proceed with the SSO setup.

EasyDMARC will provide you with an Entity ID and Assertion Consumer Service URLs (Single Sign-On URLs) that you need to update in your Okta, along with the Attribute statements.

Copy the above information, head back to your Okta > General > Paste the information as seen in the screenshot

Under ATTRIBUTE STATEMENTS, add these statements:

Click on Next, and Save

The final step is to set the Assignments to let your Users sign in to EasyDMARC

After completing the steps above, please follow the instructions below:

• Log out of your EasyDMARC account.
• Open an incognito/private browsing tab.
• Log in using the application created in your identity provider (IDP).
• You will be redirected to EasyDMARC, where you’ll see a prompt to link your account to SSO.
• Click the link to initiate the account linking process. (as shown in the First Screenshot)
• Check your inbox for an email from EasyDMARC (as shown in the Second Screenshot).
• Click the link in the email to complete the login.