Steps: Configure SAML SSO Using Okta

Prerequisites

An Okta account with administrative permissions.
An Adaptive Planning account with administrative permissions
A confirmation email from Adaptive Planning stating that you've provisioned SAML on your instance

Use the Okta Validated Adaptive Planning Application

Sign in to Okta administration and click
Admin
.
Click the
Applications 
tab.
Click
Browse App Catalog
and search for Adaptive Insights. From the search results, select
Adaptive Insights SAML
.
Click
Add Integration
and enter these details:
Application label
. The default values is Adaptive Insights. You can leave the default value as the application label.
Adaptive Planning SSO URL
. From Adaptive Planning, copy and paste the URL from
Administration
SAML SSO Settings
SSO URL
.
NameID format
. Leave the default value of
Unspecified
.
Application Visibility
:
Do not display application icon to users
. The option is unchecked by default. You can select this option based on your business requirements.
Do not display application icon in the Okta Mobile App:
The option is unchecked by default. You can select this option based on your business requirements.
Click
Done
.

Set Okta as an Identity Provider in Adaptive Planning

In the application you added within Okta in the previous section, click the
Sign On
tab.
Click
View SAML setup instructions.
To complete configuring Adaptive Planning to accept SAML 2.0 requests from Okta, follow the instructions on the View SAML setup Instructions page.

Test the SAML SSO from Okta into Adaptive Planning

In Okta, click the application you added in
Add the Adaptive Planning Application in Okta
.
Click the
Assignments
tab and then select the
People
tab.
Click
Assign
and select
Assign to People
.
Assign the application to yourself and any other users who require access to it.
Sign in to Adaptive Planning with your administrator credentials.
Go to
Admin > Edit User
and select the user that you want to give access to the app.
Do the same for other users who need access to the app, if any.
In Okta, click
My Apps
.
Find the icon with the name of the application you created and click it.

Create an Okta application to connect to Adaptive Planning.

Sign in to Okta and click
Admin
.
Click the
Applications 
tab.
Click
Create App Integration
and select
SAML 2.0
. Then click
Next
.
In
App name
, enter a name for the application. Example: Adaptive Planning.
For the
Do not display application icon to users
option, the default state is unchecked. You can select the option based on your business requirements.
For the
Do not display application icon in Okta Mobile app
option, the default state is unchecked. You can select the option based on your business requirements.
Click
Next.
In
Single sign-on URL
, copy and paste the SSO URL from Adaptive Planning. Navigate to
Administration
SAML SSO Settings
SSO URL
.
Keep the 
Use this for Recipient URL and Destination URL
option checked.
In
Audience URI (SP Entity ID)
enter the same SSO URL that you copied from Adaptive Planning.
Leave the
Default Relay State
field blank.
In
Name ID format
, select
Unspecified
.
In
Application username
, select
Email
.
Click
Next
.
Select
I'm an Okta customer adding an internal app
. It’s important that you select this setting to make sure that the application isn’t visible to users outside of your instance. For more details, see the Okta documentation.
Click
Finish
.
Under
SAML Signing Certificates
, click
Actions
for
SHA-2
type and select
Download certificate
. Save the certificate in a location you’ll remember.

Set Okta as an Identity Provider in Adaptive Planning

Sign in to the Adaptive Planning instance as a user with administrator permissions.
From the main menu select
Administration
. Under
Users and Permissions
, click
SAML SSO Settings
.
Provide these SAML SSO details:
In
Identity provider name
, enter...
In
Identity provider Entity ID
copy and paste the Identity Provider Issuer value. To find this information, click the application that you created previously, and then click the
Sign On
tab in Okta. Next click
View SAML setup Instructions
.
You can find this information in Okta.
In
Identity provider SSO URL
, copy and paste the
Identity Provider Single Sign-On URL
. To find this URL, click the
Sign On
tab in Okta and then click
View SAML setup Instructions
.
(Optional) In
Custom logout URL
, enter a URL where to redirect users if they click
Logout
in the Adaptive Planning application.
For
SAML user id
, select
User's Adaptive Planning user name
.
For
SAML user id location
, select
User ID in NameID of Subject
.
For
SAML nameID format:
, select the same name ID format that you configured in Okta. Example: Unspecified
User id in Attribute
Click
Download Certificate
.
n the
Enable SAML
section, select
Allow SAML SSO and direct Adaptive Planning login
.
Click
Save.

Test the Setup

In Okta, click the application you created.
Click the
Assignments
tab and then
People
.
Click
Assign
 and select
Assign to People
.
Assign the application to yourself and any other users who will require access to it.
Sign in to Adaptive Planning with your administrative credentials.
From the main menu, select
Administration
. User
Users and Permissions
, click
Users
. Click
Edit
next to the user that you want to give access to the app.
In
SAML Federation ID
, enter the email address for the user from your Okta account.
Click
Submit
.
Do the same for other users who need access to the app, if any.
In Okta, click
My Applications
.
Find the icon with the name of the application you created and click it. If you configure everything correctly, Okta redirects you to Adaptive Planning.

SSO Into Excel Interface for Planning and OfficeConnect