How to Set Up SSO with Okta in AIScreen Manager

Single Sign-On (SSO) allows users to log into AIScreen Manager using their Okta credentials, streamlining access and improving security. This guide walks you through the process step-by-step, with detailed instructions and tips to make the setup as smooth as possible.

Step 1: Log into AIScreen Manager

• Open your AIScreen manager account.

• Go to the Settings panel.

• Navigate to Single Sign-On.

Step 2: Add a New Provider

• Click Add provider.
  
• In the popup, fill in the following fields:
  
  • Displayed name — the name your SSO will have in AIScreen.
    
  • Domain — enter your company domain.
    
  • Provider type — select Okta (or similar if Okta is not listed).
    
  • Metadata URL — leave this blank for now (you will add it later).

• After entering the name and domain and selecting the provider, the system will generate:
  
  • Entity ID
    
  • ACS URL

Save these values — you will need them for Okta configuration.

Step 3: Configure SSO in Okta

3.1. Log in to Okta

• Access your Okta admin account.

• Click the Admin button in the upper right corner.

3.2. Create a New Application

• From the left menu, go to Applications → Applications.

• Click Create App Integration.

3.3. Choose Sign-in Method

• Select SAML 2.0.

• Click Next.

3.4. General Settings

• Enter an App name (e.g., AIScreen or Test).

• Upload an app logo if desired.

• Click Next.

3.5. Configure SAML

• Single sign-on URL: Paste the ACS URL you copied from AIScreen (from Step 2).

• Audience URI (SP Entity ID): Paste the Entity ID from AIScreen (from Step 2).

• Additional settings (optional): Configure access controls if needed (e.g., limit access to specific users or groups).

3.6. Scroll down to the Attribute Statements section and add the following attributes:

• Name: firstName, Value: user.firstName

• Name: lastName, Value: user.lastName
  
• Click Next.

3.7. Feedback

• On the Feedback page, you can optionally provide details for Okta Support (e.g., “Configured SAML for AIScreen Manager”).

• If you have no comments, simply click Finish to complete the application setup.

3.8. Obtain the Metadata URL

• After app creation, you will be redirected to the settings page.

• Copy the Metadata URL from Okta — this is required for AIScreen.

Step 4: Complete the SSO Setup in AIScreen

• Go back to the AIScreen manager.

• In the SSO settings for your provider, paste the Okta Metadata URL into the Metadata URL field.

• Click Add provider.

Step 5: Add Users in Okta

• Open the created application in Okta.

• Navigate to Assignments.

• Click Assign → Assign to People.

• Add all team members or groups who need access via SSO.

• Don’t forget to add yourself to avoid losing access.

Important Note:

Before assigning users to the SSO application in Okta, you need to add those users first in the Okta “People” directory. Only users existing in Okta can be assigned to the application for SSO access.

Step 5: Conclusion and Testing

• Verify the Setup:
  
  • Log out of AIScreen Manager.
    
  • Go to the AIScreen login page and select the SSO option
    
  • Log in with your Okta credentials to confirm it works.

Troubleshooting Tips:

• Login fails: Double-check the Entity ID, ACS URL, and Metadata URL for typos or mismatches.

• App not visible: Ensure the app is set to “Visible in Portal” in OneLogin.

Still stuck?: Contact AIScreen support (hello@aiscreen.io) or OneLogin support with your configuration details.