Skip to main content

How do I configure Single Sign-On with Okta?

D
Written by Daria Nasedkina

This guide covers configuring SSO between Atlas and Okta. For general SSO concepts and the Atlas-side wizard in full, see How do I configure Single Sign-On (SSO)?

Step-by-step instructions

⚠ The steps below depend on how you log in — check yours before you start.

Look at the web address you use to log in:

If you log in at atlas-hub.co.uk

Step 1 – Create a SAML 2.0 application in Okta

  1. Sign in to Okta.

    • Go to your Okta sign-in page.

    • Sign in with your Okta administrator account.

    • If prompted, complete multi-factor authentication using the Okta mobile app or your configured method.

  2. Create a new application integration.

    • In the left-hand menu, go to Applications.

    • Click Create App Integration (or the equivalent Add Application button in your Okta tenant).

    • When asked to choose a sign-in method, select SAML 2.0.

    • Continue to the next step to configure the SAML settings.

  3. Configure SAML settings in Okta.

    • On the SAML configuration page, use the values from the Atlas Single Sign On configuration screen.

    • In Single Sign On URL (sometimes called Assertion Consumer Service URL), paste the Atlas Single Sign On URL from the Atlas configuration wizard.

    • In Audience URI (Service Provider Entity ID), paste the Atlas Audience / Entity ID from the Atlas configuration wizard.

    • Save your changes.

Step 2 – Add users in Okta and Atlas

  1. Import or create users in Okta.

    • In Okta, go to Directory → People (or the equivalent area in your tenant).

    • Add users manually or import them from a CSV file, following your organisation's process.

    • Make sure each user has the correct email address and profile attributes, including first name and last name.

  2. Assign users to the Atlas application in Okta.

    • Go to Applications and open the SAML application you created for Atlas.

    • Assign the relevant users and/or groups to this application so they can sign in using SSO.

  3. Add the same users in Atlas.

    • In Atlas, go to the user management area.

    • Create or confirm user accounts that match the email addresses (or usernames, for non-email users) configured in Okta.

    • The user identifiers must match exactly between Okta and Atlas so that SSO can map users correctly.

Step 3 – Configure Single Sign On in Atlas

  1. Configuration name and protocol.

    • Open the Single Sign On configuration page in Atlas and start the wizard.

    • Enter a clear configuration name (for example, "Okta Single Sign On").

    • If prompted, select SAML 2.0 as the protocol.

  2. Atlas Single Sign On endpoint (for Okta).

    • In Step 2 of the Atlas wizard, locate the Atlas Single Sign On endpoint details (Single Sign On URL and Audience URI / Entity ID).

    • Copy these values into the corresponding fields in your Okta SAML application configuration (as described in Step 1.3).

  3. Service provider configuration (Okta metadata).

    • In Okta, download or copy the Identity Provider metadata (or the certificate and SAML endpoints) for the Atlas application.

    • In Step 3 of the Atlas wizard, paste or upload this Okta Identity Provider metadata and certificate as requested.

    • Save and continue.

  4. User attribute mapping.

    • In Step 4 of the Atlas wizard, map the incoming SAML attributes from Okta to Atlas user fields. Typical mappings are:

      • Email address → Atlas email field

      • First name → Atlas first name field

      • Last name → Atlas last name field

    • Phone number is not required and can be skipped.

    • Use the exact attribute names configured in your Okta SAML application.

  5. Additional settings.

    • In Step 5 of the Atlas wizard, configure any optional settings, such as:

      • Force Single Sign On: require users in this configuration to sign in only via SSO.

      • Just-in-Time provisioning (if available): automatically create user accounts in Atlas when they sign in for the first time via SSO.

    • Review your settings and save the configuration. It should save without errors.

Step 4 – Test the connection

Run the test from Atlas:

  • On the Atlas Single Sign On configuration page, select Test connection.

  • Atlas redirects you to the Okta sign-in page.

Expected behaviour:

  • You're redirected to the Okta sign-in page.

  • You can successfully sign in with a user who has been assigned to the Atlas application in Okta.

  • After successful authentication, you're redirected back to Atlas.

  • Atlas shows a confirmation that the connection test was successful.

If you log in at app.ihasco.co.uk

Step 1 – Add the iHasco Training Suite app to Okta

  1. Sign in to your Okta account.

  2. Go to Applications, then click + Add Application.

  3. In the search box, type ihasco and search to show the available integrations.

  4. Select iHasco Training Suite and click Add.

  5. Select Do not display application icon to users (you'll create a bookmark app next).

  6. Select Do not display application icon in the Okta Mobile App (you'll create a bookmark app next).

  7. Click Done.

  8. Click the Sign On tab, then Edit.

  9. Scroll to Advanced Sign-on Settings, find URL Key, and enter your iHasco URL key.

  10. Click Save.

  11. Click View Setup Instructions and follow Okta's instructions to complete your SSO configuration in your iHasco Atlas LMS.

  12. Assign your training users to the iHasco Training Suite app.

Step 2 – Create an iHasco bookmark app

  1. In Okta, go to Applications.

  2. In the search box, type bookmark app and search to show the available integrations.

  3. Select Bookmark App and click Add.

  4. Under General Settings, in Application label, enter iHasco Training.

  5. In URL, enter your iHasco Training URL.

  6. Click Done.

To change the default bookmark logo to the iHasco logo:

  1. Click the default logo to show the Edit Logo options.

  2. Download the iHasco logo using this link: iHasco bookmark logo.

  3. Upload the logo to your iHasco bookmark and click Update Logo.

  4. Click Close.

To add your training users to the bookmark:

  1. Click the Assignments tab.

  2. Assign your training users to the list.

Step 3 – Set the registration method in Atlas

  1. Log in to the iHasco Atlas LMS as an administrator.

  2. Go to Settings.

  3. Scroll down to the Advanced card and click Security.

  4. Find Registration Method and select Single Sign On Provider.

  5. Choose your new provider as the Selected Provider.

  6. Click Save changes.

Step 4 – Test SSO using Okta

Note: Before testing, make sure you've added users to the iHasco Training app in Okta, and sign out of any iHasco administrator accounts.

  1. In your Okta User Home, click iHasco Training.

  2. If the test is successful, you'll be signed in and taken to the iHasco My Learning screen (or to the iHasco Atlas LMS if testing with a pre-registered admin account).

Troubleshooting tips

If the test connection fails:

  • Confirm that the Single Sign On URL and Audience / Entity ID values in Okta exactly match the values shown in Atlas.

  • Check that the Okta user is assigned to the Atlas SAML application and that the same user exists in Atlas with matching identifiers.

  • Verify that the SAML attribute names for email, first name, and last name in Okta match the mappings configured in Atlas.

  • Review any error messages in Atlas or Okta to see which part of the configuration needs adjustment.

If you still can't resolve the issue yourself, see I can't resolve SSO issues, what should I do?

Related Articles
Did this answer your question?