Enabling Single Sign-On with Okta

Roles and permissions

Only administrators can enable SSO for the organization

Hyperproof supports Single Sign On (SSO) with Okta via SAML. Once SSO is enabled for your organization, users can log in with their Okta credentials using a custom URL that is specific to the organization (e.g. https://luna.hyperproof.app).

The first step towards enabling SSO in your organization is to add Hyperproof to your Okta tenant. You’ll need a subdomain, which is provisioned by Hyperproof Support. To get your subdomain, create a support request asking for SSO setup.

Note

If the domain is a .com address, the subdomain is set as the domain without the .com suffix.

If the domain is not a .com address, the subdomain is set as the domain name without the period.

Examples

Domain name	Subdomain
http://acme.com	acme
http://lunabtechnologies.com	lunabtechnologies
http://techstartup.io	techstartupio
http://whitehouse.gov	whitehousegov

Hyperproof can be found in Okta’s App Integration Catalog. This integration makes configuring Hyperproof in Okta quick and easy.

Log in to your Okta tenant as an Administrator.
From the left navigation menu, select the Applications drop-down menu, and then click Applications.
Click Browse App Catalog.
Enter Hyperproof in the search bar. Select the SAML option.
Click Add Integration.
For the subdomain, enter the subdomain provided to you by your Customer Success Manager.
Click Done.
From the Assignments tab, add one or more users to groups to your application.
Select the Sign On tab.
Click View SAML Setup Instructions.
Copy the Identity Provider Metadata URL and save it to the clipboard.
Note
Do not skip this step! You’ll need the metadata URL to complete the setup.

Once the Hyperproof application has been configured in Okta, you’ll need to add the metadata URL to the SSO configuration for your Hyperproof organization.

Log in to Hyperproof as an Administrator.
From the left menu, select Settings and then select Authentication.
Note
The Authentication tab is not visible until SSO is turned on for your organization. If SSO has been turned on and you don’t see the tab, log out of Hyperproof and then log back in again. If the option is still not visible, please create a support request.
Toggle on Single Sign On (SSO).
The Authentication window opens.
From the Identity Provider drop-down menu, select Okta.
Below Identity Provider Metadata URL, paste the metadata from step 11 in the previous section.
Optionally, if you’d like users to be able to log in via IdP (i.e. clicking the Hyperproof logo on the Okta Apps page), select the Allow IdP-initiated sign-in checkbox.
Click Save.

You’ll be able to log in to Hyperproof using your Okta credentials after SSO is fully configured for your Hyperproof organization.

At this point, you’ll have the option to make SSO required. If it’s required, users without a company email address will still be able to log in via Google, Office 365, or email/password. Refer to Requiring SSO for login for more information.

Using your previous credentials, e.g. Google, Office 365, or email/password, log in to Hyperproof.
From the left menu, select Settings and then select Authentication.
At the top of the screen you will see your organization’s SSO URL. This is the URL that your organization's Hyperproof users will use to log in to Hyperproof.
Copy the SSO URL to the clipboard.
Log out of Hyperproof by clicking your user icon in the upper-right corner, and then clicking Sign Out.
Paste the SSO URL into a new browser tab and then press Enter.
You’re redirected to your Okta directory where you can log in with your Okta credentials. Once you’ve provided your Okta credentials, you’ll be logged into Hyperproof automatically.
If you were able to log in to Hyperproof successfully using SSO, you are ready to share the SSO URL with the other Hyperproof users in your organization.

In this section:

Enabling Single Sign-On with Okta

Roles and permissions

Note

Note

Note

Search results