Okta SSO Setup
Access Okta Admin Dashboard
- Log in to your Okta Admin Console
- Your URL will look like:
https://your-domain.okta.com/adminorhttps://your-domain.oktapreview.com/admin - Ensure you have Super Admin or Application Admin privileges
Create SAML 2.0 Application
- In the Okta Admin Console, navigate to Applications → Applications
- Click Create App Integration
- Select SAML 2.0 as the sign-in method
- Click Next
- Enter the following information:
EQS Platform
You can upload your company logo or skip this step
- Check the box "Do not display application icon to users" if you want to hide it from the Okta dashboard
- Click Next to proceed to SAML configuration
Configure SAML Settings
On the SAML Settings page, enter the following values:
General Settings
https://your-company.eqs.com/saml/acs
✓ Check "Use this for Recipient URL and Destination URL"
https://your-company.eqs.com/saml/metadata
Leave empty
EmailAddress
Email
acme.eqs.com, use acme as your company identifier.
Advanced Settings (Optional)
Select: Signed
Select: Signed
Select: RSA-SHA256
Configure Attribute Statements
Scroll down to the Attribute Statements section and add the following attributes:
| Name | Name format | Value |
|---|---|---|
email |
Basic | user.email |
firstname |
Basic | user.firstName |
lastname |
Basic | user.lastName |
username |
Basic | user.login |
- Click "Add Another" for each attribute
- Enter the Name exactly as shown (case-sensitive)
- Select "Basic" as the Name format
- Enter the corresponding Value from the table
Group Attribute Statements (Optional)
If you want to pass user groups to EQS for role-based access control:
groups
Select: Basic
Select: Matches regex and enter .* to include all groups
- After adding all attributes, scroll to the bottom
- Click Next to proceed to feedback
- Select "I'm an Okta customer adding an internal app"
- Click Finish
Download Metadata & Assign Users
Download SAML Metadata
- You should now be on the Sign On tab of your EQS application
- Scroll down to the SAML 2.0 section
- Right-click on "Identity Provider metadata" link
- Select "Save link as..." and save the XML file
- Alternatively, click "View SAML setup instructions" and download from there
Send Metadata to EQS
Email the downloaded XML file to:
support@eqs.com
Include your company name and EQS subdomain in the email for faster processing.
Assign Users to the Application
- In your EQS application in Okta, go to the Assignments tab
- Click Assign and choose:
- Assign to People - for individual users
- Assign to Groups - for entire groups (recommended)
- Select the users or groups that should have access to EQS
- Click Assign for each selection
- Click Done when finished
Testing the Integration
- Wait for EQS Support to confirm they've configured your SSO settings (usually within 24 hours)
- Once confirmed, have a test user navigate to your EQS URL:
https://your-company.eqs.com - They should see an "SSO Login" or "Sign in with Okta" option
- Click that option to be redirected to Okta for authentication
- After successful login in Okta, the user should be redirected back to EQS and logged in