Use Okta as a SAML identity provider

If you use Okta to centralize authentication and authorization in your business, you can integrate Kinde as a service provider for these processes. This gives you the benefits of Kinde’s robust auth capabilities, while keeping the familiar Okta structure.

You need to set up an enterprise connection in Kinde for this, and add an Okta application. See steps below.

Step 1: Add and configure an Okta connection in Kinde

Link to this section

1. In Kinde, go to Settings > Authentication.
2. In the Enterprise connections section, select Add connections.
3. In the window that appears, select Okta and then select Save. The connection is added.
4. On the connection you just created, select Configure.
5. Enter a random value for Entity ID, for e.g. 870sa9fbasfasdas23aghkhc12zasfnasd.

6. Copy the Assertion Customer Service (ACS) URL and the Entity ID somewhere you can access it later. You’ll need this to set up your Okta application.
7. Select Save.

Step 2: Add and configure your Okta application

Link to this section

1. Sign in to the Okta admin console.
2. Select Applications > Applications.

3. Select Create App Integration. The Sign-in method options opens.
4. Select SAML 2.0 and then select Next. The app’s general settings opens.

5. Add a name in the App name field then select Next. The Configure SAML screen opens.

6. In the SAML settings section, enter the following values:
   1. Single sign-on URL: Paste the Assertion Customer Service (ACS) URL you copied from Kinde.
   2. Audience URI (SP Entity ID): Paste the Entity ID you copied from Kinde.
   3. Name ID format: Select EmailAddress.
   4. Application username: Select Email.
   5. Leave all other options to their default value and select Next.
7. In the next screen, select I’m a software vendor. I’d like to integrate my app with Okta, then select Finish. You will be redirected to the newly created application in Okta.
8. Select the Sign on tab and copy the metadata URL.

Step 3: Add the metadata URL to your SAML connection

Link to this section

1. In Kinde, go to Settings > Authentication.
2. Select Configure on the Okta connection.
3. Scroll to the IdP metadata URL field and paste the Metadata URL you copied from Okta.

4. In the Applications area, switch on the applications you want to use this connection.

5. Select Save. You can now use Okta as an IdP for the selected applications.