How to use Okta SAML with Sapling

Configuration Steps

1. Log in to your Okta admin dashboard. Make sure to be in the "UI Classic" view.
2. Select Applications.
3. Select Add Application. 
4. Type Sapling in the search box, choose Sapling SAML from the list of available options, and click Add. If a Connection name is required you can use Sapling-[CompanyName]
5. Under the assignments tab, assign users or groups to the Sapling application that you want to be able to use Sapling with Okta.
   
   
6. Find your Sign in URL, Sign out URL and X509 Signing Certificate under the "Sign On" tab under View Setup Instructions. 
   
7. Copy and Paste information from fields 1, 2, 3, and 4 and send this information to support@sapling.ai for Sapling to enable your Sapling application.
   
   
   
   
8. After the connection is setup on Sapling's side, you will be provided with information to fill out under SAML settings. This will include the Single Sign On URL and Audience URI, among other things. 
   
9. Some of the fields are under "Advanced Settings"
10. Sapling uses Home Realm Discovery to route users to the correct Identity Provider (IDP). Please also share a list of all email domains that your users will be signing into Sapling with (i.e "sapling.ai")

Notes

Users can initiate SSO from the Sapling integration they are on by clicking the "Enterprise SSO" option at the start of the login flow.