This guide walks through configuring Apragya AI as a SAML 2.0 service provider in Okta, end-to-end. Total time: 12-15 minutes for an admin who's done a SAML setup before, ~25 for first-timers.
Before you start
- You need admin access to your Okta tenant.
- You need SaaS Admin or org_admin role on the Apragya tenant.
- Decide upfront whether you want JIT provisioning (auto-create users on first login) or pre-provision.
Step 1 - create the Okta app
In Okta admin, go to Applications → Create App Integration → SAML 2.0. Name it "Apragya AI". On Step 2 (Configure SAML), set Single Sign-on URL and Audience URI to the values shown on Admin Settings → SSO in Apragya. Both URLs are tenant-scoped.
Step 2 - paste the metadata into Apragya
Back in Okta, download the IdP metadata XML. In Apragya, paste it into Admin Settings → SSO → IdP Metadata. The fields auto-populate from the XML.
Step 3 - assign users + test login
Assign at least one Okta user to the new app, then click "Test SAML login" on the Apragya admin page. A successful login completes the setup.
If you hit "InvalidAudience" errors, the Audience URI in Okta doesn't match the tenant SP entity ID shown in Apragya. Copy/paste rather than re-typing to avoid trailing whitespace.