Okta Custom SAML App for SCIM Configuration

~ minute read

You will need values from your UserVoice metadata XML found at https://<subdomain>.uservoice.com/saml/metadata.xml (replacing <subdomain> with your subdomain).

1. General Settings

  1. In Okta, in the left nav click Applications → Applications.
  2. Click Create App Integration and then select SAML 2.0 → and click Next.
  3. In the App Name box, choose a name for your application, then click Next.

2. Configure SAML

  1. In the Single sign-on URL text box enter https://<subdomain>.uservoice.com/saml/consume
  2. In the Audience URI text box enter your entityID. This is your full UserVoice URL without https:// or slashes. You can also find it in the metadata.xml.
  3. In the Default Relay State text box, enter your UserVoice URL - https://<subdomain>.uservoice.com
  4. For the Name ID Format, select EmailAddress
  5. For the Application username, select Email
  6. Under the Attribute Statements section, add an attribute with the Name: email, Name format: URI Reference, and Value: user.email
  7. No further configuration required. Click Next.

3. Obtain the Remote Sign-In URL

  1. Navigate back to the Application → Sign-On, and scroll down to SAML Signing Certificates.
  2. Click View SAML setup instructions (on the right).
  3. Scroll to Step 1 and copy the Identity Provider Single Sign-On URL for use in the UserVoice Configuration.

4. Obtain SAML Cert

  1. Navigate back to Sign-On and scroll down to SAML Signing Certificates.
  2. If you don't already have one, generate a SHA-2 cert.
  3. Next to the cert, click Actions → Activate.
  4. Now click Actions → Download. This will download okta.cert file for use in the UserVoice Configuration.

5. Assign Users

  1. Navigate to the Assignments tab
  2. Click the Assign Button → Assign to People
  3. Add people assignments

Note: Make sure to assign users to the application otherwise they will not gain access to UserVoice.

UserVoice Configuration

You should have your Remote Sign-In URL and have downloaded the SAML cert before proceeding.

  1. In UserVoice, navigate to Settings → General → User Authentication → Edit.
  2. Click the plus next to Single Sign On (SSO) to add a configuration.
  3. Give your button a label and an icon (optional).
  4. In the Remote Sign-In URL text box, enter the Remote Sign-In URL you obtained in Step 3.
  5. Upload the .cert file obtained in Step 4.
  6. Click Save.

Related articles