Okta SSO

​

Prepare the SSO form in Minimus

1. Open the Minimus SSO form. You can use this direct link or navigate as follows: Go to Manage > Users. Then click Configure SSO.
   Keep this form open and available in another browser tab as you configure the SAML app in Okta.
2. The form has 3 parts:
   1. Configure Minimus as a custom app in your identity provider - You will need to copy these parameters from Minimus to Okta in the next steps.
      1. SP Entity ID
      2. Reply URL (Callback / ACS URL)
      3. Relay State (optional) - If you leave the Relay State blank, users will only be able to login with SSO from the Minimus homepage.
   2. Connect Minimus to your identity provider - You will need to fetch these parameters from your Okta custom app and save them in the Minimus form.
      1. Login SSO URL
      2. IdP Entity ID
      3. Certificate
   3. SAML Attribute Mapping - You will configure matching attributes in both Okta and Minimus. Fill in the following:

      Minimus Parameter	Input
      Email	email
      Full name	fullName

​

Add Minimus as a custom app in Okta

1

Create a Minimus application in Okta

1. Login to your Okta Admin Console.
2. Create a new SAML application:
   1. In the left-menu, go to Applications > Applications.
   2. Select the option Create App Integration.
   3. Select SAML 2.0 as the sign-in method.
   

2

Configure the general settings

1. Fill in the General Settings:
   1. Name the application. (We’ll assume the name Minimus App was used for the rest of this guide.)
   2. Upload the Minimus logo to help your team identify the app in their app gallery. (This is not required but highly recommended.)  
   3. Click Next.

3

Configure SAML

1. Open the Minimus SSO form in another browser tab. You can use this direct link or navigate as follows: Go to Manage > Users. Then click Configure SSO.
2. Copy the following parameters from the Minimus app to Okta (Note that the order of the parameters is different in the 2 apps):  

   Minimus Parameter	Okta Parameter
   SP Entity ID	Audience URI (SP Entity ID)
   Reply URL (also Callback URL)	Single sign-on URL
   Relay State	Default RelayState

3. Fill in the fields below:
   1. Name ID Format - Select EmailAddress from the list.
   2. Application Username - Select Email from the list.

      Okta Parameter	Input
      Name ID Format	EmailAddress
      Application Username	Email

   

4

Configure attribute statements in Okta

Still in the same Okta tab, scroll down to the section Attribute Statements. Fill out the table in Okta as follows:

Name	Name Format	Value
fullName	Unspecified	user.firstName + ” ” + user.lastName
email	Unspecified	user.email

You can copy the value for the fullName field here:

Copy

Ask AI

user.firstName \+ " " \+ user.lastName

5

Save your custom SAML app

1. Click Next to continue. 
2. Okta will ask for your feedback now that you have configured the custom SAML app.

6

Connect the Okta SAML app to Minimus

1. In Okta, under your newly created Minimus app:
   1. Switch tabs to Sign On. (You should be automatically navigated to this tab.)
   2. Expand More details.
2. Copy the following parameters from Okta to Minimus:

   Okta Parameter	Minimus Parameter
   Sign on URL	SSO URL
   Issuer	Entity ID

   

7

Download Base64 Certificate

1. Still on the same screen, download the signing certificate from Okta to Minimus.
2. Open the certificate in notepad or another code viewer, and copy the code (including `-----BEGIN CERTIFICATE… and …END CERTIFICATE-----`).
3. Copy the certificate to the Minimus form.

If you copy the certificate, note that it will not include the opening and closing tags:

-----BEGIN CERTIFICATE----------END CERTIFICATE-----

You can paste the certificate between the tags provided by the placeholder.

8

Save the Minimus SSO form

You are now ready to save the SSO configuration form in Minimus.

​

Assign access in Okta

1. Login to your Okta Admin Console.
2. In the left-menu, go to Applications > Applications.
3. Select your Minimus App to open its details.
4. Select the **Assignments **tab.
5. Select Assign > Assign to people / groups and follow the instructions on the page.

​

Troubleshooting SSO access

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----