Setup eCompliance SSO on the Web with Okta

1. Create a new application: Go to Okta applications
   1. Click Create new app integration
   2. Choose SAML 2.0 and click Next

2. Enter App name: eCompliance and click Next

3. Setup Okta App

   1. SAML Sign-on URL : Follow Step 4 and 5 to get this value

   2. Audience URL: https://my.ecompliance.com

   3. Name ID Format: EmailAddress

   4. Application Username: Email

   5. Response: Signed

   6. Assertion Signature: Signed

   7. Signature Algorithm: RSA-SHA256

   8. Digest Algorithm: SHA256

4. Go to eCompliance settings -> SSO Settings and check Yes, I want to enable Single Sign On and enter the following temporary values:

   1. Certificate Fingerprint : TEST

   2. SAML SSO URL : TEST

   3. Click Save

   4. ACS URL will be generated so copy that

5. Go back to Okta and paste the ACS URL in the Single Sign-On field
6. Set Authentication context class to X.509 Certificate
7. Click Next
8. Select the option I'm an Okta customer adding an internal app then click Finish

9. Assigning Users: Go to the created app

   1. Add users or groups. This example uses Assign to People
   2. Select People and click Assign > Save > Done
10. Alternatively, you can use Groups
11. Now go to the Sign On tab and click View SAML Setup Instructions
12. Copy the Identity Provider Single Sign-On URL from field #1 and paste it into the SAML SSO URL in eCompliance
13. Copy the X.509 Certificate and go to Calculate Fingerprint - OneLogin Developers
    1. paste the certificate and click calculate fingerprint
    2. copy the generated fingerprint
    3. paste that in Certificate Fingerprint in eCompliance SSO Settings. 
       1. 
14. Save the final settings in eCompliance
15. Go to Okta application > General > Copy the URL from the embed link section
16. Paste this on a new tab in browser (for test purposes) and eCompliance will authenticate the user via Okta and sign in the user into eCompliance if the profile with the given email is present in eCompliance.

NOTE:

1. When setting up SSO for your localhost, the config behaves a bit differently, it needs to be setup with http:// instead of https
2. Also, by default, only Mobile SSO is enabled for an organization. You need to go to Administrator > Settings > Accounts > (Your Site) > Enable SSO and check to see these options in your eC Org.

Sample Config for localhost:

Okta:

eCompliance: