How to enable SCM SSO with Okta?

Overview: 
This guide provides the step-by-step process for enabling Single Sign-On (SSO) for Sectigo Certificate Manager (SCM) using Okta as the Identity Provider (IdP). Following this process allows users to authenticate through Okta using secure SAML 2.0 assertions.

Prerequisites

Before you begin, ensure you have the following:

 

• Administrator access to the Okta portal
• Administrator access to the Sectigo Certificate Manager (SCM) platform
• The correct SAML 2.0 endpoints and attribute details required by SCM
• Group structure prepared in Okta (Object ID or Common Name values)
  
  
  

Procedure
Build an Okta SAML Application

1. From the Okta left navigation menu, click Applications.
2. On the Applications page, click Create App Integration.

3. On the Create a new app integration page, select SAML 2.0.

4. Click Next.
5. On the Create SAML Integration page under General Settings, enter a name into the App name field, such as Okta SAML.

6. Click Next.
7. In the SAML Settings section next to Single sign-on URL, paste the following: 
8. Set the Attribute Statements as follows:

To set an IdP template in SCM use the following Group Attribute:

 

Configuring the Sectigo Platform with SAML:

Choose IdP assertions mapping Authorization method.

• Edit > Add Conditions >
• Header name groups.
• Matches any or set as Contains any.
• Attribute Value(s): The groups Object ID or Common Name in Okta portal created at the beginning.

 

Use an incognito if you are testing:

Test the Configuration

It is recommended to test using an incognito/private browsing window:

• Navigate to the SCM login page.
• Log in using an Okta user that belongs to the appropriate Okta group(s).
• Verify the authentication flow is successfully redirected through Okta.