How Do I Enable SSO/SAML For Okta?

How Do I Configure SSO with Okta?

The below steps will allow you configure single sign-on with Okta. This will enable your users to automatically sign-in to KnowBe4 for their security awareness training through their Okta account.

You'll need an Okta subscription to configure single sign-on with Okta. 

First, add KnowBe4 from the Applications tab.

1. Log in to your Okta account and click the Applications tab. Click the "Add Application" button on the top left.
   
2. In the search box, type in KnowBe4 SAML. You'll see "KnowBe4 SAML" appear in the list. Click the "Add" button on the right.
   
   

Next, obtain your KnowBe4 SSO Sign In URL.

3. Obtain your unique SSO Sign In URL by completing the following steps:
   1. Log into your KnowBe4 account.
   2. Click your email address on the top-right and click Account Settings.
   3. Scroll down to the SAML section and copy your unique SSO Sign In URL.
      

Finally, configure your single sign-on.

4. Once you obtain the SSO Sign In URL for your account, complete the following steps on the Configure App Settings page:
   1. In the SAML Account ID text box, enter the only the account ID number you obtained in step 3 above. For example, if your callback URL is: https://training.knowbe4.com/auth/saml/xxxxxxxxxxxx/callback, enter: xxxxxxxxxxxx
      (Note: this will be a mixed string of alpha-numeric characters)
   2. In the Base URL text box, enter: https://training.knowbe4.com
      (Note: If you are on KnowBe4’s EU Server, enter: https://eu.knowbe4.com)
   3. Click the "Next" button.
      
5. Choose the users and/or groups you wish to assign the application to, then click the "Next" button.
   
   
6. Once you’ve created the assignments, go to the Sign On tab and click the "View Setup Instructions" button.
   
7. Copy the IDP SSO Target URL and IDP Cert Fingerprint and send to KnowBe4 support to complete the setup.