Okta Single Sign-on Setup with Workzone via SAML

1. Log into Okta and add an application by navigating to the Applications section and clicking the green Create New App button.

2. On the Sign on method dialog that pops up, select SAML 2.0 and click Create.

3. On the next page, enter an App name (we recommend Workzone) and click Create.

4. On the next page, enter the following into the first two fields, replacing “yourcompany” with the name you use to access Workzone:

Single sign on URL: https://yourcompany.sharedwork.com/sso

Audience URI (SP Entity ID): https://yourcompany.sharedwork.com/trust

5. Go to the Sign On tab and scroll down to find the Attribute statements settings. Open the Show legacy configuration area and edit the Profile attribute statements. In the "Name", "Name format", and "Value" fields, enter:

• Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
• Name format: Unspecified
• Value: user.email

6. Click on the Workzone (or the name that was used in step 3) application in your list of applications.

7. Click on the Sign On tab. Click on the Identity Provider metadata link to download the Okta metadata to your desktop, and upload that file to the Single Sign-on page under the Setup tab in Workzone.

8. Click on the People tab and assign your users to Workzone.

9. Log into Workzone and add all your users. Their email addresses in Workzone must match their email addresses in Okta.

10. Log into Workzone as an administrator and activate SSO on the Single Sign-on settings page. You’re all done!