This article will walk you through how to configure Braze to use Okta for single sign-on.
Okta connects any person with any application on any device. It’s an enterprise-grade, identity management service, built for the cloud, but compatible with many on-premises applications. With Okta, IT can manage any employee’s access to any application or device.
|Okta turned on for your account||Reach out to your Braze Account Manager to have this turned on for your account|
|Okta Admin Privileges||Please make sure you have Admin Privileges before setting up Okta|
|Braze Admin Privileges||Please make sure you have Admin Privileges before setting up Okta|
Step 1: Configure Braze
Step 1a: Log in to your Braze Account and Navigate to Security Settings
Log into your Braze account using an admin account.
Click on your user name, then select
Company Settings from the dropdown menu. Next, select the
Security Settings tab. Toggle the green
SAML SSO switch to
ON from the right side of the page.
Step 1b: Edit SAML SSO Settings
From your Okta Admin Dashboard, you will be provided a
Target URL (Login URL) and
x.509 certificate which you must input into your Braze account.
||This will appear as the button text on the login screen. This is typically your IdP name, For example, “Okta”.|
||This is the Login URL provided by Okta Admin Dashboard.|
Save Changes at the bottom of the page once completed.
Step 2: Enable the IdP-initiated Flow
Next, you must create your Braze API Key with
sso.saml.login permission enabled.
- If you do not already have such a Braze API Key, one can be created by going to the
Settings, then click
Create New API Key.
From here, scroll down to the SSO section and check the
sso.saml.loginoption and then save the API Key.
Step 3: Configure Okta
Step 3a: Navigate to Okta
In Okta, select the
Sign On tab for the Braze SAML app, then click
Step 3b: Update Default Relay State
Enter the API key with
sso.saml.login permission you made in Step 2, in the
Default Relay State field.
Save these new settings.
If you want your Braze account users to only sign in with SAML SSO, you can restrict single sign-on authentication from the
Company Settings page.
You should now be able to log into Braze using Okta!