OKTA Setup

1-README.md

Setup OKTA App

1. Create a new Application SAML 2.0 in OKTA
2. Configure SAML

The "attribute statements" section is optional. If you want to create user on the first login with more data than email, you need to set these attributes.

3. Done

How to get "Identity Provider metadata"

Once the application is created, you can retrieve the path to the metadata from the "Sign On" tab.

It looks like to https://XXXXX.okta.com/app/a1b2cderfg34DFI/sso/saml/metadata

2-config.yml

light_saml_symfony_bridge:
    own:
        entity_id: "https://XXXXXXXXXXXX.okta.com/"
        credentials:
            -
                certificate: "%kernel.root_dir%/../vendor/lightsaml/lightsaml/web/sp/saml.crt"
                key:         "%kernel.root_dir%/../vendor/lightsaml/lightsaml/web/sp/saml.key"
                password:    ~
    party:
        idp:
            files:
                - "https://XXXXXXXXXXXX.okta.com/app/%okta_idp%/sso/saml/metadata"
    store:
        id_state: id_store

3-parameters.yml

parameters:
    okta_idp: abcdDDdp4dle8kG5LV0x7  # Identity Provider metadata ID