Skip to main content

Configuring SAML SSO for Crossbeam via Okta Integration Network (OIN)

E
Written by Elizabeth Garcia

Requirements

  • Supernode or Enterprise Crossbeam plan

  • Admin access to an Okta org

Supported Features

  • Just-In-Time (JIT) Provisioning

  • IdP-initiated SSO

  • SP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

Configuration Steps

Step 1: In Crossbeam, go to Settings and press “Configure SAML SSO”

Make a note of the Connection Identifier, which you'll need in Step 3.

Step 2: In Okta, find the Crossbeam app

Navigate to “Applications and Resources” > Applications and press the “Browse App Catalog” button at the top.

Step 3: Configure the Crossbeam app in Okta

Copy the “Connection Identifier” from the SSO Configuration modal you opened in Step 1, and paste it into the “Crossbeam Connection Identifier” field in Okta. Then press “Done.”

On "Sign On," click "Edit."

Change "Application username format" from "Okta username" to "Email."

Click "Save."

Step 4: Complete SSO setup in Crossbeam

Copy the metadata URL from the Crossbeam app in Okta and paste it into the SSO Configuration modal in Crossbeam SSO Configuration under “Identity Provider Metadata URL”.

Once copied over, press “Save”. Configure SSO enforcement and default roles as desired, and when ready, press “Save Settings” at the bottom of the page.

Logging in to Crossbeam with your Okta SSO

Go to your SSO Settings page and copy your Organization Crossbeam Login URL; it will look something like this:

https://app.crossbeam.com/login?sso=02f05e41-6e18-4ec6-fake-830ee9b707a9

This is the unique URL you'll need to log in to your organization on Crossbeam via Okta's SSO.

You can also assign people or groups to the Crossbeam app in Okta so that they can log in via the Crossbeam tile in their Okta dashboard.

Notes

The following SAML attributes are supported:

Name

Value

email

user.email

first

user.firstName

last

user.lastName

Did this answer your question?