SSO via Okta

Getting started

Integrating redirect.pizza with Okta couldn't be easier by using the official integration.

Note: Okta/SAML SSO is available from our Business plan and up.

Installation

You can find the integration on https://www.okta.com/integrations/redirect-pizza/.

Press "Add integration" to install the integration in your Okta environment.

Supported features

* IdP-initiated SSO
* SP-initiated SSO

For more information on the listed features, visit the Okta Glossary

Read this before you enable SAML

Enabling SAML affects all users who use this application.
Users will still be able to sign in through their regular sign-in page. After SAML SSO is active, you may choose to revoke password based authentication.
They are able to access the app through the Okta service.

Backup URL

redirect.pizza provides a backup sign-in URL where users can sign-in using their regular username and password. If necessary, you can keep your password based authentication on your SSO connected account, so that both SSO & password based authentication are available in case of emergency.

Configuration steps

1. Copy the Metadata URL from the Okta Admin Console, SAML 2.0 Sign on methods section.
2. Contact the redirect.pizza support team via Support and send over the Metadata URL.
The redirect.pizza support team will process your request.
3. Navigate to More -> Settings -> SSO. There you can find the ACS & entity ID.
4. In your Okta Admin Console, select the Sign on tab for the redirect.pizza SAML app, then click "Edit" and follow the steps below:

• "Encryption Certificate": Upload the certificate provided by redirect.pizza. You may find this here: here
• Scroll down to Advanced Sign-on Settings and enter your "SSO ID".
• Application username format: Select "email".
• Click "Save"

5. Your SAML configuration for redirect.pizza is complete. You can start assigning people to the application.

SP-initiated SSO

The sign-in process can be initiated from redirect.pizza or from the IdP. To sign-in via redirect.pizza, you can:

1. From your browser, navigate to the redirect.pizza sign-in page.
2. Enter your company email address. If a valid SSO configuration is detected, you will be prompted with "Logging in with SSO"
3. Enter your Okta credentials (your email and password) and click "Sign in with Okta".
   If your credentials are valid, you are redirected to the redirect.pizza dashboard.