PC Matic + Okta SAML Setup
PC Matic + Okta SAML Setup
Overview
This guide explains how to configure SAML Single Sign-On (SSO) between Okta and PC Matic.
Prerequisites
Before you begin:
- Administrator access to Okta
- Administrator access to the PC Matic Management Console
- Access to the PC Matic Identity Provider configuration page
Step 1: Create the Okta Application
- Sign in to the Okta Admin Console.
-
Navigate to Applications > Applications.
Select Create App Integration.
Choose:
- Sign-in method: SAML 2.0
- Application type: Web Application
- Click Next.
Step 2: Configure SAML Settings
In the PC Matic Management Console, navigate to the Identity Provider Setup page.
Copy the following values:
- ACS / Reply URL
- SP Entity ID
Configure the following settings in Okta:
| Okta Setting | PC Matic Value |
|---|---|
| Single Sign-On URL | ACS / Reply URL |
| Audience URI (SP Entity ID) | SP Entity ID |
Leave other settings at their default values unless required by your organization.
Step 3: Configure User Attributes
PC Matic requires the user's email address.
Add the following Attribute Statement:
| Name | Name Format | Value |
|---|---|---|
| http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress | URI Reference | user.email |
PC Matic may also receive the email address through the SAML NameID.
Step 4: Assign Users and Groups
- Complete the application wizard.
- Open the newly created application.
- Navigate to Assignments.
- Assign users and groups that require access to the PC Matic Management Console.
Step 5: Configure Identity Provider Metadata
- Open the application's Sign On tab.
- Locate the Metadata URL.
- Copy the Metadata URL.
- Paste the Metadata URL into the PC Matic Identity Provider configuration page.
Save the configuration.
Validation
Verify:
- Users can authenticate through Okta.
- Email claims are present.
- Users appear correctly within PC Matic.
- Login succeeds using SSO.