Who is this article for?

IT Personnel who want to learn to configure SSO to authenticate Okta users.

Administrator permissions are required.

This guide will help you configure single sign-on (SSO) using SAML 2.0 for Lucidity Software to authenticate against your Okta users.

1. Create a Lucidity App Instance in Okta
   1. General section
   2. Attribute statements
2. Provide the metadata to Lucidity
3. Further reading

1. Create a Lucidity App Instance in Okta

1. Log in to your Okta account as an Admin and navigate to Applications.
2. Click Create New App.

3. For Platform, select Web.
4. For Sign on method, choose SAML 2.0.

5. Click Create.

6. Set the App name (we recommend "Lucidity Software") and upload the Lucidity icon.
7. Click Next.
8. Enter the following details, replacing {site-name} with your Lucidity site name:

1.1. General section

• Single sign on URL: https://{site-name}.luciditysoftware.com.au/simplesaml/module.php/saml/sp/saml2-acs.php/{site-name}
• Audience URI (SP Entity ID): https://{site-name}.luciditysoftware.com.au/simplesaml/module.php/saml/sp/metadata.php/{site-name}
• Default RelayState: https://{site-name}.luciditysoftware.com.au/home/login/lucidityintranet/completesso/{site-name}

Note: The Default RelayState URL determines which Lucidity module users are directed to when signing in through Okta.

1.2. Attribute statements

• Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn
• Name Format: Unspecified
• Value: user.login

Note: The value must match the username convention in Lucidity. For email-based usernames, only use the part before '@' (e.g., 'bob.smith' for 'bob.smith@somewhere.com').

9. Click Next.
10. Answer Okta's question about how the app will be used.
11. Add users who will be allowed to log in to the app (refer to Okta's instructions for this step).

2. Provide the metadata to Lucidity

To complete the setup, Lucidity needs the IdP metadata:

1. Navigate to the Okta Lucidity app you created.

2. Go to the Sign On section.

3. Right-click on the Identity Provider metadata link in the SAML 2.0 section and copy the link.
4. Send this link to your Lucidity contact.

Note: The link should look similar to: http://{okta-site-name}.okta.com/app/{okta-app-id}/sso/saml/metadata

Lucidity will use this IdP metadata to finish the server setup and will notify you once complete.

3. Further reading