Implementation Guide: SSO Integration for Globex Corp

Date: 2026-01-20 | Engineer: A. Patel | Client: Globex Corporation

Executive Summary

Configured SAML 2.0 SSO integration between Globex Corp's Okta identity provider and our platform, enabling 2,400 Globex employees to authenticate using their corporate credentials.

Objectives

1. Enable SAML-based SSO for all Globex users
2. Implement just-in-time user provisioning
3. Map Okta groups to platform roles (Admin, Editor, Viewer)
4. Enforce MFA through Okta policy (no platform-side MFA needed)

Prerequisites

• [ ] Globex IT admin access to Okta admin console
• [ ] Platform enterprise license activated for Globex org
• [ ] SSL certificate for globex.acmeplatform.com

Implementation Steps

1. Create SAML Application in Okta

1. Log into Okta Admin Console
2. Navigate to Applications > Create App Integration > SAML 2.0
3. Configure: - Single sign on URL: https://globex.acmeplatform.com/auth/saml/callback - Audience URI: urn:acmeplatform:globex - Name ID format: Email Address

2. Configure Platform SAML Settings

{
"sso_url": "https://globex.okta.com/app/acmeplatform/sso/saml",
"entity_id": "http://www.okta.com/exk1234567890",
"certificate": "MIIDp...base64...cert",
"attribute_mapping": {
"email": "user.email",
"first_name": "user.firstName",
"last_name": "user.lastName",
"role": "user.department"
}
}

3. Test SSO Login

1. Open an incognito browser
2. Navigate to https://globex.acmeplatform.com
3. Click "Sign in with SSO"
4. Verify redirect to Okta, authenticate, and successful return

Lessons Learned

• Okta group sync required a 15-minute initial delay — documented for future implementations
• Clock skew between Okta and our servers caused intermittent failures — resolved by enabling NTP sync