Page Comparison

This

guide is intended to help configure single sign on / SAML 2.0  for Lucidity Software to be able to authenticate against you Okta users.

Create a Lucidity app instance

1. Login into your account Okta as an Admin and and navigate to Applications

2. Click Create New App

   Image Added

3. Select the Platform type as Web and the Sign on method as SAML 2.0
   Image Added

4. Click Create

1. Image Added

2. App name and logo can be anything you want as long as you remember whats it for, we recommend calling your app “Lucidity Software” and using the Lucidity icon provided:

   Image Added

3. Once you have done this click Next

4. Enter the following details provided below and leave the rest as  the default value:
   
   NOTE: Replace {site-name} with your Lucidity site name

   Under the General section:

   Single sign on URL
   https://{site-name}.luciditysoftware.com.au/simplesaml/module.php/saml/sp/saml2-acs.php/{site-name}

   Audience URI (SP Entity ID)
   https://{site-name}.luciditysoftware.com.au/simplesaml/module.php/saml/sp/metadata.php/{site-name}

   Default RelayState:
   https://{site-name}.luciditysoftware.com.au/home/login/lucidityintranet/completesso/{site-name}
   
   NOTE: This guide is intended to help configure single sign on / SAML 2.0  for Lucidity Software to be able to authenticate against you Okta users.

Create a Lucidity app instance

1. Login into your account Okta as an Admin and and navigate to Applications

2. Click Create New App

   Image Added

3. Select the Platform type as Web and the Sign on method as SAML 2.0
   Image Modified

4. Click Create

1. Image Added

2. App name

1. and logo can be anything you want as long as you remember whats it for, we recommend calling

1. your app “Lucidity Software” and using the

1. Lucidity icon provided:

1. Image Added

2. Once you have done this click

1. Next

2. Enter the following details provided below and leave the rest as  the default value:
   

1. NOTE: Replace {site-name} with

1. your Lucidity site name

   Under the General section:

   Single sign on URL
   https://{

1. site-name}.luciditysoftware.com.au/simplesaml/module.php/saml/sp/saml2-acs.php/{

1. site-name}

   Audience URI (SP Entity ID)
   https://{site-name}.luciditysoftware.com.au/simplesaml/module.php/saml/sp/metadata.php/{site-name}

   Default

1. RelayState:
   https://{site-name}.luciditysoftware.com.au/home/login/

1. lucidityintranet/

1. completesso/{site-name}
   
   NOTE: The Default Relay State URL will determine the Lucidity module that user are directed to when they sign into Lucidity through Okta.

   Under the Attribute statements:
   Add the following:
   Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn
   Name Format: Unspecified
   Value: user.login
   

1. 
   NOTE: The value

1. needs to match the username naming convention used for users in

1. Lucidity. If an email is used only the first part is required (eg bob.

1. smith@somewhere.com becomes bob.smith for authentication)

1. Image Added

2. Click Next

3. Answer Okta’s question on how the App is going to be used

2. Lastly you will need to add the users to the system who will be allowed to login to the app
   (see

1. Okta’s instructions)

Providing the

Metadata to Lucidity

In order to

complete the set up Lucidity requires the

IdP metadata 

1. Navigate to the Okta Lucidity app you created above if you are not already there 

1. Image Added

2. Click on the

1. Lucidity app and navigate to the Sign On section

1. Image Added

2. Right click on the Identity Provider metadata

1. link in the SAML 2.0 section and copy the link

2. Send the link to

1. your contact at Lucidity

1. 
   NOTE: The link should look something like:

1. http://{

1. okta-site-name}.okta.com/app/{okta-app-id}/sso/saml/metadata

2. Once Lucidity has the

1. IdP metadata we can finish the server set up and will

1. notify you once complete