Step 2 — Create a New SAML Application and
Define User Group Mappings in Okta
Note
You must create the user groups in the IdP before you can map the user roles in
ExtremeCloud IQ.
From Okta, navigate to
Applications > Applications, and then select Create App
Integration.
Select SAML 2.0, and then select
Next.
Enter an App name, and then select
Next.
In the SAML Settings section, enter temporary URLs as a
placeholder that will be updated later for the following fields:
Single sign-on URL:
https://replaceme
Audience URI (SP Entity ID):
https://replaceme
Scroll down to the Attribute Statements section.
Set Name to user.email and the
corresponding Value to user.email,
and then select Add Another.
Set Name to
user.firstName and the corresponding Value to
user.firstName, and then select Add
Another.
Set Name to user.lastname and the
corresponding Value to
user.lastname.
Scroll down to the Group Attributes section:
Set Name to
user.group.
Set the corresponding
Filter to Matches
regex, and then set the Value to
.* (a period followed by an asterisk).
Select Next.
On the Help Okta Support understand how you configured this
application page, set App Type, and then
select This is an internal app that we have
created.
