redirect.pizza is available in the Okta Integration Network (OIN), so connecting Okta takes only a few steps. This guide walks you through them. Available from the Business plan and up.
Not using Okta? See the general SAML SSO guide.
Supported features
- IdP-initiated SSO
- SP-initiated SSO
The Okta glossary explains these terms.
Before you enable SAML
Enabling SAML affects every user of your redirect.pizza team. Users can still sign in with their password on the regular sign-in page while SSO is active; once everyone is on SSO, you can choose to disable password sign-in. Either way, users can open redirect.pizza from their Okta dashboard.
redirect.pizza also provides a backup sign-in URL where users sign in with their username and password. Keeping password sign-in enabled next to SSO gives you a way in if your Okta configuration ever breaks.
Installation
Open the redirect.pizza integration in the Okta Integration Network and press Add integration to install it in your Okta environment.
Configuration
- In the Okta Admin Console, open the redirect.pizza app, go to the Sign On tab and copy the Metadata URL from the SAML 2.0 section.
- Send the Metadata URL to the redirect.pizza support team. We set up the connection on our side and let you know when it's ready.
- In redirect.pizza, open More, SAML SSO. You'll find your ACS URL, Entity ID and SSO ID there.
- Back in the Okta Admin Console, on the Sign On tab of the redirect.pizza app, press Edit:
- Encryption certificate: upload our current certificate.
- Under Advanced Sign-on Settings, enter your SSO ID.
- Application username format: select Email.
- Press Save.
- Assign people or groups to the application. Only users who have also been invited to your redirect.pizza team can sign in; see Team management.
Signing in from redirect.pizza (SP-initiated)
- Go to the redirect.pizza sign-in page.
- Enter your company email address. When an SSO configuration is detected for your domain, we offer to sign you in with SSO.
- Sign in with your Okta credentials. You're redirected to your redirect.pizza dashboard.