Using Okta for SSO with Tekst

This section will show you how to set up your custom SAML application for Okta SAML.

Step 1: Create application

1. In your Okta account, navigate to "Applications" using the left-hand menu.

• If your application already exists, select it from the list and proceed to the "Configure Application" section.
• If you haven’t created a SAML application yet, click "Create App Integration" to start setting up a new one.

2. On the next screen, select "SAML 2.0" as the sign-in method, then click "Next" to continue.

3. Give your application an App name and click "Next".

Step 2: Configure Application

1. Enter or select the following values in the SAML Settings section on the next screen:

Step 3: Attribute Mapping

1. Under the Attribute Statements section, you have to configure the following attributes:

2. On the next screen select "I'm an Okta customer adding an internal app" and "This is an internal app that we have created". Then click "Finish".

3. From your application, click "Sign On tab" and go to the section SAML Signing Certificates
4. Click the Actions dropdown for the correct certificate and click "View IdP metadata". A separate window will open with the metadata XML file, you can copy it to your clipboard. This is the metadata you use to connect to Tekst.

Step 4: Upload metadata to Tekst

1. Open the downloaded Federation Metadata XML file in a text editor and copy the entire contents.
2. Log in to Tekst and navigate to Settings >  SSO.
3. Click "New SSO connection"
4. Select "Okta" as the Identity Provider and click "Next"
5. Paste the entire raw XML contents into the "Raw Metadata" field
6. Click "Finish" to activate SSO. A success message will appear and a new "Continue with Okta" button will appear on the Tekst login page.

Ensure you paste the complete XML file including the declaration. Incomplete or malformed XML will result in a parsing error.

Step 5: Switching existing users to SSO

If you have existing users who currently log in with passwords, they can switch to SSO on their first SSO login. The SSO option will appear alongside the email/password login.

For detailed instructions on transitioning users, see How to switch a user from password login to SSO.

Communicate the change to your users via email with clear login instructions. Users will see both SSO and password options until passwords are disabled.