How Do I Configure SSO with Okta?

The below steps will allow you to configure single sign-on with Okta. This will enable your users to automatically sign-in to KnowBe4 for their security awareness training through their Okta account.

You'll need an Okta subscription to configure single sign-on with Okta. For additional assistance, review Okta's documentation.

First, add KnowBe4 from the Applications tab.

1. Log in to your Okta account and click the Applications tab. Click the Add Application button on the top-left.
   
2. In the search box, type in KnowBe4 SAML. You'll see "KnowBe4 SAML" appear in the list. Click the Add button on the right.
   

Next, obtain your KnowBe4 SSO Sign In URL.

3. Obtain your unique SSO Sign In URL by completing the following steps:
   1. Log in to your KnowBe4 account.
   2. Click your email address on the top-right and click Account Settings.
   3. Scroll down to the SAML section and copy your unique SSO Sign In URL.
      

Finally, configure your single sign-on.

4. Once you obtain the SSO Sign In URL for your account, complete the following steps on the Configure App Settings page:
   1. In the SAML Account ID text box, enter the only the account ID number you obtained in step 3 above. For example, if your callback URL is: https://training.knowbe4.com/auth/saml/xxxxxxxxxxxx/callback, enter: xxxxxxxxxxxx
      (Note: This will be a mixed string of alpha-numeric characters)
   2. In the Base URL text box, enter: https://training.knowbe4.com
      (Note: If you are on KnowBe4’s EU Server, enter: https://eu.knowbe4.com)
   3. Click the Next button.
      
5. Choose the users and/or groups you wish to assign the application to, then click the Next button.
   
6. Once you’ve created the assignments, go to the Sign On tab and click the View Setup Instructions button.
   

   Note:

   You may need to change the Application username format field to Email in order for single sign-on to work properly. To edit the settings on this tab, click the Edit button in the top right corner and the fields will become editable.

   
   
7. Copy the IDP SSO Target URL and IDP Cert Fingerprint and send to KnowBe4 support to complete the setup.