---
title: How to configure SSO/SAML
slug: how-to-configure-ssosaml
docTags: 
createdAt: 2025-12-11T07:12:18.000Z
---

## Okta Configuration

### Prerequisites

- Create a Swimlane user with an email address that will be used across all steps.
- **Make sure the Swimlane URL in Advanced Configuration is the one that is used across all steps.**

### Configuration

1. Create an account on Okta Developer (If you already have an account, you can create a Person in the organization with the same email address as the prerequisite. If not, use the same email address to make it easier).
2. Create a New Application and select* SAML 2.0* as the Sign-on method.
   - Fill the App name and click next
   - Configure the SAML Settings as follows (replace the hostname value) 

SAML SETTINGS:

![](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/8137830664/original/Jo7P3eG7cOX5Pv4wZd4f7Qpnsdhv_eDAGA.png?1730709057)

3. Click Finish
4. Navigate to the new Application and click the *Assignments* tab.
   1. Click *Assign to People*. In this case, add the Person with the same email address as the prerequisite
5. Now click the *Sign On* tab, select the *View Setup Instructions* button, and copy the values in the Swimlane SAML Authentication dialog.
   - Select *Email Address* in the Name ID Format field
   - Identity Provider Single Sign-On URL → SSO URL
   - Identity Provider Issuer → Identity Provider Entity ID
   - Fill the *Swimlane host name* in the Service Provider Entity ID field
   - X.509 Certificate → Identity Provider X509 Certificate

![](https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/TWyClT_P1q8Av-2kqMWJn_image.png)

6. Save the configuration and login by clicking *Login via SSO* in the login page.

![](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/8137840894/original/EE0GjDYkMESmIdqj1P-yzont8cftrxuOmw.png?1730721568)

## Azure AD Configuration

### Prerequisites

- Create a Swimlane user with an email address that will be use across all steps.

### Configuration

- Create an Azure account
- Navigate to the Azure Active Directory service and add a User with the same email address as the prerequisite. (Invite the user if the email address is different from the organization).
- Create a new Enterprise Application.
  - Click on Create your own application
  - Fill in the app name and click Create

![](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/8137840936/original/g8-KTtsOkhOHSfDxShE3uNgEl_tC3njcdA.png?1730721639)

In the application menu, assign the user we created in Step 2

- In the application menu, click on Set up single sign-on.
- Select SAML as the single sign-on method
- In the *Basic SAML Configuration *section edit the configuration as follows (replace the hostname value):

![](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/8137841249/original/uf9gdVLtrsR5YixoNE-TjhSOmFHCAsCp2A.png?1730721971)

- In the *SAML Signing Certificate *section download the Certificate (Base64)

1. With the information of the 

*Set up AppName* section fill the Swimlane SAML Authentication dialog.

- Select *Email Address* in the Name ID Format field
- Login URL → SSO URL
- Azure AD Identifier → Identity Provider Entity ID
- Fill the *Swimlane host name* in the Service Provider Entity ID field

![](https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/2uz7bjH_G2ARz8p3ehRyx_image.png)

Rename the certificate extension to .cert and upload it → Identity Provider X509 Certificate

1. Save the configuration and login by clicking 

*Login via SSO* in the login page

![](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/8137841707/original/1eXDvTtgrR-dPBpAWqLF0EZuxblS0m1yyA.png?1730722383)