Okta SAML SSO

Configure SAML single sign-on with Okta, then send the metadata URL to We360 Support for activation.

Use this guide to configure Okta for We360 SAML SSO.

We360 Support must activate SSO after your Okta setup. Send Support the Identity Provider Metadata URL after step 4. SSO will not work until Support confirms activation. Do not test before that confirmation.

1

Create a SAML application

1. Sign in to the Okta Admin Console at https://<your-okta-domain>.okta.com/admin.
2. Go to Applications → Applications.
3. Select Create App Integration.
4. Select SAML 2.0, then select Next.
5. Name the application, such as We360 SAML.
6. Select Next.

2

Configure SAML values

Enter these values exactly:

• Single sign-on URL (ACS URL): https://auth.in.we360.ai/realms/ind-prod/broker/<domain>-okta/endpoint
• Audience URI (SP Entity ID): https://auth.in.we360.ai/realms/ind-prod
• Name ID format: EmailAddress
• Application username: Email

Replace <domain> with your We360 portal subdomain.

For https://mydomain.we360.ai, use:

https://auth.in.we360.ai/realms/ind-prod/broker/mydomain-okta/endpoint

3

Add attribute statements

Add these attributes:

• email — value: user.email
• firstName — value: user.firstName
• lastName — value: user.lastName

Set each attribute's name format to Unspecified. Select Next, then Finish.

4

Send metadata to We360 Support

1. Open Applications → We360 SAML → Sign On.
2. Copy the Identity Provider Metadata URL.
3. Send that URL to We360 Support.

Support uses this URL to complete the We360-side SSO configuration. Wait for their confirmation before testing.

5

Assign users or groups

Open Applications → We360 SAML → Assignments. Assign the users or groups that need SSO access.

Users cannot sign in unless they are assigned to the application.

6

Test after activation

After Support confirms activation, open https://<domain>.we360.ai and start sign-in. You should be redirected to Okta.