> ## Documentation Index
> Fetch the complete documentation index at: https://kb.aampe.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta SAML SSO

> Here we will show you how to set up your own custom SAML application for Okta SAML

## Create application

1. From your Okta account, click **Applications** from the left navigation menu.
2. If your application is already created, choose it from the list and move to the section [Configure Application](#configure-application)
3. If you haven't created a SAML application, click the **Create App Integration** button to create a new application.

   <img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_okta_1.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=2bdb9a97b4af5b5e8f9a056d61d0d4d5" alt="Sso Okta 1 Pn" width="3184" height="1768" data-path="images/sso_okta_1.png" />
4. Choose **SAML 2.0** from the next screen and click **Next**.

   <img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_okta_2.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=8c5b3a2694619725381aba3b0b7a0e8f" alt="Sso Okta 2 Pn" width="3184" height="1775" data-path="images/sso_okta_2.png" />
5. Give your application an **App Name** and click **Next**.

   <img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_okta_3.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=5060a75e2b1b7cac73f903359a44cf3b" alt="Sso Okta 3 Pn" width="3184" height="1770" data-path="images/sso_okta_3.png" />

## Configure application

1. Enter the following values in the **SAML Settings** section on the next screen:

   * **Single sign on URL**
   * **Audience URI (SP Entity ID)**
   * Select **EmailAddress** from the **Name ID format** dropdown.

   Replace the values with the ones you have received from Aampe.

   <img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_okta_4.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=7b084e67c18a1325a63ba0278c647eea" alt="Sso Okta 4 Pn" width="3184" height="1770" data-path="images/sso_okta_4.png" />

## Attribute mapping

1. Under the **Attribute Statements** section, you have to configure the following attributes:

| Name         | Value            |
| :----------- | :--------------- |
| `id`         | `user.id`        |
| `user.email` |                  |
| `firstName`  | `user.firstName` |
| `lastName`   | `user.lastName`  |

See the screenshot below.

<img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_okta_5.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=ace11965b42e8f44a69e4f8a21c5dbcf" alt="Sso Okta 5 Pn" width="3184" height="1769" data-path="images/sso_okta_5.png" />

2. On the next screen select **I'm an Okta customer adding an internal app** and click **Finish**.

   <img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_okta_6.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=c8f1e0905f7e68c195b9d1f74e1839ed" alt="Sso Okta 6 Pn" width="3184" height="1767" data-path="images/sso_okta_6.png" />
3. From your application, click **Sign On** tab and go to the section **SAML Signing Certificates**
4. Click the **Actions** dropdown for the correct certificate and click **View IdP metadata**. A separate window will open with the metadata XML file, you can copy it to your clipboard.

   <img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_okta_7.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=6ee0caa942429d29e4943bab9332c873" alt="Sso Okta 7 Pn" width="3184" height="1765" data-path="images/sso_okta_7.png" />

## Next steps

You've successfully configured your custom SAML application for Okta SAML. At this stage, you can assign users to your application and start using it.