Okta is one of the available IDPs to use with Single Sign-On (SSO) in your Hosted~FTP~ account, allowing you to authenticate securely from any device with your SSO credential. This feature is available on our Enterprise T2+ and above accounts. Please note: Hosted~FTP~ SSO supports both SAML 2.0 and OpenID Connect. test
How to Setup Okta #
Please follow the steps below.
| 1 | In Okta, log in as an administrator and navigate to the Admin > Applications area. |
| 2 | Click the Add Application button. |
| 3 | Click the Create New App button, select SAML 2.0, and then confirm by clicking the Create button. |
| 4 | Give the app a name (e.g. HostedFTP) and upload a logo if you desire. |
| 5 | Click the Next button. |
| 6 | Login to HostedFTP and navigate to the SSO page in the Setup > SSO console and click Add. |
| 7 | Select SAML and Okta in the drop-downs. |
| 8 | Copy the ACS URL from the HostedFTP SSO configuration page and paste it into the Okta Single sign-on URL field. |
| 9 | Copy the Entity ID from the HostedFTP SSO configuration page and paste it into the Okta Audience URI (SP Entity ID) field. |
| 11 | Set the Name ID format to EmailAddress. |
| 12 | Set the Application Username to Email. |
| 14 | Click the Next button in Okta and Select This is an internal app that we have created. Click Finish. |
| 15 | Assign Okta people and/or groups to the application |
| 16 | Once done, or on the Sign On tab in Okta click to expand the details in the “SAML 2.0” section |
| 17 | Copy the Issuer field and paste this into the Hosted~FTP~ SSO screen in the Response Issuer field |
| 18 | Copy the Sign on URL field and paste this into the Hosted~FTP~ SSO screen in the IDP URL field |
| 19 | Download the X.509 Certificate from Okta. Open the certificate using a word editor such as notepad and copy the entire contents of the text including —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—– and paste into the Hosted~FTP~ SSO setup page in the Certificate field. |
| 20 | Click Save. Test your connection to verify the settings. |
Enabling SSO for users #
Once your SSO is configured, you will need to enable your user logins to use SSO on an entire account, group of users, or individual user level. Please refer to this article on how to enable SSO for user logins.
