How to Configure Okta SAML for Jotform Enterprise

Okta’s single sign-on solution can quickly connect to third-party services, including Jotform Enterprise. To get started, you must enable Single Sign-On on your Jotform Enterprise server. You also need an Okta
account with admin permissions.

The Jotform Enterprise SAML integration currently supports the following features:

• SP-initiated SSO
• IDP-initiated SSO
• Just in Time (JIT) provisioning

Configuring Okta SAML

To configure Okta SAML

1. In your Okta Administrative portal, navigate to Applications in the left-hand sidebar
2. Click the Browse App Catalog near the top of the resulting page.

3. Search for Jotform in the search bar, then click the Jotform integration from the results.
4. Click the Add Integration button to add the Jotform integration to your Okta instance.
5. Enter your desired Application Label and your Organization URL. If you have a custom domain
   configured with Jotform Enterprise, enter that instead.

6. Click the Save button.
7. Next, go to the Sign On tab and click on Edit.

8. Click the Attributes (optional) button to fill in SAML Attributes. You can view the attribute list supported by the JIT provision at the end of this document. You can set the single attributes you would like to use in Jotform Enterprise.

9. On the same page, click on More Details under Metadata Details to copy your SAML details.

Connecting Okta SAML on Jotform Enterprise

To connect your Okta SAML app

1. Login to your Admin account on Jotform Enterprise and open Admin Console from the Profile Menu.

2. Go to Settings on the left, then turn on Single Sign-On.
3. Enter the Metadata Details you copied earlier from Okta as follows:
   • Entity ID — Issuer.
   • SSO URL — Single Sign-On URL.
   • Certificate — Signing Certificate.
   • SLO URL — Single Logout URL.

Once configured, you can start adding users to your SAML application and use Okta on your Jotform Enterprise server.

Notes

For the SSO prefill, you can add desired claims and manage them at the Jotform Enterprise Admin Console.

The following SAML attributes are just for JIT provisioning.

SP-initiated SSO

SP-initiated flows trigger when the user hits an authentication-required route.