Setting up Okta SSO for Firmable (Beta)

Firmable now supports SAML-based Single Sign-On (SSO) via Okta. This feature is currently in Beta. 

This guide will walk you through configuring Firmable as an enterprise app inside Okta so your team can log in securely with their Okta credentials. 

Prerequisites 

Before you begin, please make sure: 

• You are an Okta administrator. 
• Your Firmable account includes SSO as part of your enterprise subscription. If you’re unsure, please email support@firmable.com. 

Step 1: Create a new enterprise app in Okta 

1. Sign in to your Okta dashboard.
2. Select Admin in the top right corner.
3. In the side navigation, go to Applications and select Applications.
4. Click Create App Integration.
5. In the Create a new app integration modal, choose SAML 2.0 then select Next.
6. On the Create SAML Integration page, complete the General Settings (App name is required).
7. Select Next. You'll be redirected to the Configure SAML page.
8. Enter the following values, as supplied to you by the Firmable team:  
   1. Single sign-on URL
   2. Audience URI (SP Entity ID) 

Step 2: Verify correct configuration of attribution statements

Firmable expects your SAML responses to include these attributes:

• Email address (required) > Claim name: user.email (Note: This is the email address that your users will use to authenticate into your app)
• First name (optional) > Claim name: user.firstName 
• Last name (optional) > Claim name: user.lastName 

To confirm in Okta: 

1. In the Configure SAML page, scroll to Attribute Statements (optional).
2. Add the following mappings: 
   Name: mail > Value: user.email
   Name: firstName >Value: user.firstName
   Name: lastName > Value: user.lastName
3. Your screen should look similar to the example below:

4. Select Next, complete the Feedback page, then click Finish.

Step 3: Assign users or groups  

Users or groups must be assigned before they can log in with Okta.

1. In the Okta dashboard, select the Assignments tab.
2. Select Assign, then Assign to groups.
3. Assign users or groups as needed, then click Done. 

Step 4: Share the app's metadata URL 

After completing the setup, you’ll be redirected to the application’s Sign On tab. 

1. Under Sign on methods, copy the Metadata URL. 
2. Share this URL with the Firmable team so we can complete the connection on our side.  

Next steps 

Once we receive the metadata URL, our team will finalise the SSO connection. We’ll confirm once everything is active, and your assigned users will then be able to log into Firmable using Okta.  If you run into any issues, please contact support@firmable.com