Skip to main content

Configure Single Sign-On with Okta for Managed Services Center

Learn about how to configure SSO with Okta for Managed Services Center.

Overview

Using Okta as an Identity Provider, administrators can allow users to sign in directly to the Managed Services Center.

Keep the following information handy

  • ACS URL: https://login.druva.com/api/commonlogin/mspsamlconsume

  • Audience URI (Entity ID):MSC-login

Procedure

Step 1: Launch Okta to select the sign-in method

  1. In the Okta Admin Console, go to Applications > Applications.

  2. Click Create App Integration.

  3. Select SAML 2.0 as the Sign-in method.

    SSO_Okta_SAML2.0.png

  4. Click Next.

Step 2: Configure General Settings

  1. Specify the name of your app. You can use any name.

    Okta_SSO_General_Settings.png

  2. Add a logo for your app (optional).

  3. If you want to hide your app from your users' homepage, select the App visibility checkbox (optional).

Step 3: Configure SAML General settings

  1. Provide the Single Sign-on URL (Copy the ACS URL given in the overview section).

    Okta_SSO_SAML_Settings.png

  2. Provide the Entity ID (Copy the Entity ID given in the overview section).

  3. Select the Email Address from the drop-down lists of formats for the Name ID format.

Step 4: Configure the SSO token obtained from Managed Services Center:

  1. Generate and copy the SSO token from Managed Services Center.

  2. Navigate to the OKTA Application, and go to Configure SAML tab. Under the Attribute Statements (Optional) section, enter the following attributes:

    • Name:druva_auth_token

    • Value:Paste SSO token generated in MSC

  3. Click Next.

    Druva_SSO Token_Okta.png

Step 5: Select the option to configure Druva MSC in Okta

  1. Select I'm a software vendor. I'd like to integrate my app with Okta.

    Configure_Druva_MSC_in_Okta.png

  2. Click Finish. Your integration is created in your Okta org.

Step 6: Assign the MSC app to administrators (users)

  1. Select the MSC app and go to the Assignment tab.

  2. Click the Assign button from the top-left corner, and then select Assign to People from the drop-down list.

    Assign_Okta_app_to_users.png

  3. Search for administrators and click the Assign button available in front of that administrator.

  4. If you want to change the user name, edit it and then click the Save and Go back button.
    ​Note: The username should match the email address used for MSC Administrators.

  5. Click Done to complete the action.

Step 7: Get IdP login URL and Certificate

  1. To update the Single Sign-on settings in the Managed Services Center

  2. Copy the IdP login URL and certificate from Okta.

  3. Go to Managed Services Center and paste the IdP login URL and certificate in the appropriate fields.

(Optional) SAML Authentication requests and encrypt assertions

The AuthnRequests Signed and Encrypt assertions are optional settings in Managed Services Center. If you want to add more security to your SSO, you can enable these settings.

Procedure

Step 1: Enable Security Settings and Retrieve Your SAML Certificate

  1. Log in to the Managed Services Center.

  2. Navigate to Settings > Access Settings.

  3. In the Single Sign-On (SSO) section, click Configure SSO (for first-time setup) or Edit.

  4. Under ID Provider Configuration, select the AuthnRequests Signed or Encrypt Assertions checkbox.

  5. While still in this window, copy the SAML certificate and save it to your computer in .crt format.

  6. Click Save to apply your changes in Druva.

  7. Finally, upload the .crt file to your Identity Provider (IdP).

❗ Important

This certificate will be the same for both AuthnRequests Signed and Encrypt Assertions.

Step 2: Upload SSO SAML Certificate to IdP

  1. Copy the SSO SAML Druva certificate provided above and save it in a .crt format.

  2. Navigate to the OKTA Application, search and select the application from the list.

  3. In the General tab, edit the SAML settings.

  4. Click Next, and then click Show Advanced Settings in the Configure SAML tab.

  5. Change “Assertion Encryption” from Unencrypted to Encrypted.

  6. Click Browse files for the Encryption Certificate, and then select the saved SSO SAML Druva certificate.

  7. Click the Next button, and then click Finish on the feedback tab to complete the update.

Related Articles
Did this answer your question?