Requirements
- Advanced Authentication and Security
Set up single sign-on with Okta through Robin's official connector app in Okta's app marketplace. When you install the connector app, Okta should give you a personalized guide automatically. You can also use the connector app to set up automatic user provisioning with SCIM.
Add the Robin connector app in Okta
Find the Robin connector app in Okta's app marketplace and add it.
- In Okta, open Add Application.
- Search for
robin. - Select Add next to Robin (Okta Verified, SAML).
If the connector app gives you trouble, connect Okta as a custom integration. Follow the steps in Enabling single sign-on via SAML 2.0.
Fix "Failure Decrypting Data"
If you see Failure Decrypting Data when you sign in, upload the Robin Okta certificate to the app configuration in Okta.
Get the certificate in one of these ways:
- Download it here: Download the Robin Okta x509 certificate
- In the web dashboard, go to Manage > Security. In the SAML 2.0 card, before SAML is set up, select View configurations for your Identity Provider, then select Okta. After SAML is set up, select View Identity Provider configuration instead. It shows the configuration for the provider you set up.
- In the web dashboard, go to Manage > Integrations and select Set up (or Manage) next to Okta. In the Single sign-on card, expand Public Certificate and select Download Certificate.
Then upload it in Okta:
- In Okta, go to Applications > Robin > Sign On.
- In Settings, select Edit.
- Under SAML 2.0, upload the certificate as the Encryption Certificate.
Check your Robin configuration
To check that you set up the Robin side correctly, compare it with this working configuration in the SAML configuration form:
| Field | Value |
|---|---|
| Provider | Okta |
| SAML SSO URL | Your Okta app's sign-on URL, in the form https://<your Okta domain>/app/robin/<app ID>/sso/saml
|
| Identity Provider Issuer | http://www.okta.com/<app ID> |
| Public Certificate | The full certificate from Okta, starting with -----BEGIN CERTIFICATE-----
|
| Auth Context | Only Password Protected Transport checked |
| Encrypt Assertion | Checked |