Set up SSO in Splunk Synthetic Monitoring using Okta

You can set up single sign-on (SSO) in Splunk Synthetic Monitoring using SAML 2.0 via Okta. If you use a different identity provider, see Set up SSO in Splunk Synthetic Monitoring. 

Prerequisites

• You must be an administrator in your organization’s Okta account, with Okta set up as your organization’s identity provider. 
• Make sure all the users you want to add have access to Splunk Synthetic Monitoring. See Add users and groups to learn how to create accounts for new users. 
• Check that all your users are assigned to the correct roles in Splunk Synthetic Monitoring, as Splunk Synthetic Monitoring does not inherit RBAC from your identity provider. See What Are The Types Of User Roles? to learn about roles. 

Set up SSO login using Okta

Follow these steps to set up SAML 2.0 login using Okta:

1. Add an application in Okta
2. Assign user access to the application in Okta
3. Copy the metadata XML in Okta
4. Configure SAML in Splunk Synthetic Monitoring

Add an application in Okta

See the Okta documentation for detailed instructions: https://developer.okta.com/docs/. Follow these steps to optimize your setup for use with Splunk Synthetic Monitoring: 

1. In Okta’s Admin Console, go to Applications > Applications.
2. Click Create App Integration.
3. Choose SAML 2.0 as the sign-in method.
4. Provide a name and description you’ll associate with Splunk Synthetic Monitoring. 
5. In the Configure SAML connection field, choose Manually enter. 
6. In the Single sign-on URL field, enter the following URL: https://monitoring.rigor.com/saml/callback 
7. In the Audience URI field, enter the following URL: https://monitoring.rigor.com/saml/login 
8. You can leave the Default RelayState field empty.
9. In the Name ID format field, choose EmailAddress from the dropdown menu. 
10. In the App username field, enter Email. 
11. Save your application. 

Assign user access to the application in Okta

In the Assignments tab in your new application in Okta, choose Assign > Assign to people and enter the email of the user you want to add. Ensure this email matches the email address they use to log into Splunk Synthetic Monitoring. 

Copy the metadata XML in Okta

1. Under the Sign on tab of your new application in Okta, click View Setup Instructions. A new tab opens with the setup instructions. 
2. In the new tab under Optional, copy the contents of the IDP metadata XML. 

Configure SAML in Splunk Synthetic Monitoring

1. From the Admin Tools menu in Splunk Synthetic Monitoring, select SAML Configuration.
2. Under Name, enter a name for the configuration.
3. Under XML, paste the XML you copied from Okta. 
4. Verify the configuration by clicking the Verify button or choosing Verify from the gear icon menu.
5. Once the configuration is verified, Edit the configuration and check the box next to Enable. A modal box appears to confirm you want to enable the configuration, which will log you and all users out of the account. 
6. To log back in, enter your Splunk Synthetic Monitoring username in the Splunk Synthetic Monitoring login page and click Next. If SSO is configured correctly, Okta opens to complete the login.   

Once SAML login is set up, users are asked to re-authenticate via Okta every 12 hours. After they re-authenticate, users return to their active session.