OKTA - SAML2.0

eSignGlobal supports federated authentication based on SAML 2.0. You can integrate OKTA with eSignGlobal through SAML 2.0 federated authentication to achieve single sign-on for OKTA accounts to eSignGlobal without having to create separate accounts for each user in the enterprise or organization.

Creating an OKTA Application

1. Log in to the OKTA developer backend.

2. After successful login, click on [Application - Create App Integration] to create an application and select [SAML 2.0]

3. Fill in the App name and upload the App logo as needed.

Setting Up Single Sign-On

1. Return to the eSignGlobal portal, log in and install the [Single Sign-On SAML2.0 Protocol] plugin, then click on [Settings] in the top menu bar.

2. Click on [Single Sign-On] under the [Security] directory on the left.

3. Click on [Add Configuration], enter the [Service Provider Identity Identifier], and select [Single Sign-On Protocol] as SAML2.0.

4. After entering the information, the [Audience URL] (Service Provider Entity ID) and [ACS URL] will be automatically generated below. Click on the right side to copy them to the OKTA page.

5. Return to the OKTA page.

6. Next, check [This is an internal app that we have created] and click [Finish].

7. Download the XML file.

8. Open it with a browser and save it as an XML file.

9. Return to the eSignGlobal [Add Configuration] page, click on Upload the downloaded XML file.

10. After successful upload, the [Single Sign-On URL] and [Signature Certificate] will be automatically filled in. Click [Confirm] at this point.

11. The status will display [Enabled] when the SSO configuration is successful.

Configuring User Access Permissions

1. Click on [Assign Users to App].

2. Select the application and users, and click [Next].

3. Click on [Confirm Assignments] to confirm again.

Verifying SSO

1. On the eSignGlobal login page, select SSO login.

2. Enter the identifier of the workspace you belong to and click Login.

3. The page will redirect to the OKTA login.

4. On the redirected page, enter your email and the verification code sent to your email, click [Submit] to log in to the eSignGlobal homepage.