How to Set Up Okta SSO for Jotform Enterprise

Okta’s single sign-on solution can quickly connect to third-party services including Jotform. To get started you must enable Single Sign-On on your Jotform Enterprise server. You also need an Okta account with admin permissions.

The Jotform Enterprise SAML integration currently supports the following features:

• SP-initiated SSO
• IdP-initiated SSO
• Just in Time (JIT) provisioning

Configuring Okta

To create an Okta SAML application

1. Log in to your Okta admin account and go to the Admin page.

2. Go to Applications on the left, then select Create Add Integration.

3. In the dialog, select SAML 2.0.

4. Next, enter your desired App name.

5. Next, enter your Service Provider Metadata (SPM) details in the following fields:

• Single sign on URL — Your Jotform Assertion Consumer Service URL
  (e.g., https://example.jotform.com/sso/?acs).
• Audience URI (SP Entity ID) — Your Jotform Entity ID
  (e.g., https://example.jotform.com/sso/metadata.php).

6. Open Advanced Settings.

7. Upload your SPM certificate.

8. Turn on Single Logout, then enter your SPM details in the following fields:

• Single Logout URL — Your Jotform Assertion Consumer Service URL, replace ?acs with ?slo
  (e.g., https://example.jotform.com/sso/?slo).
• SP Issuer — Your Jotform Entity ID
  (e.g., https://example.jotform.com/sso/metadata.php).

9. Select Next at the bottom, then complete the feedback form.
10. On your app’s Sign On overview page, select View SAML setup instructions on the right.

11. Take note of your SAML app’s details.

Configuring Your Jotform Server

To connect your Okta SAML app

1. Go to your Jotform SSO settings page and turn on Single Sign-on.
2. Enter your SAML app’s details in the Identity Provider Metadata fields, then save your settings.

The value to use for each field is as follows:

• Entity ID — Your Okta Identity Provider Issuer.
• SSO URL — Your Okta Identity Provider Single Sign-On URL.
• Certificate — Your Okta X.509 Certificate.
• SLO URL — Your Okta Identity Provider Single Logout URL.

Once configured, you can start adding users to your SAML application and use Okta on your Jotform Enterprise server.

Notes

The following SAML attributes and more are supported:

You can add more claims and manage them from the Jotform Enterprise admin dashboard.

SP-initiated SSO

SP-initiated flows trigger when the user hits an authentication-required route.