--- title: "SSO Setup with Okta for AppSecEngineer: A Step-by-Step Guide" description: Learn how to configure Single Sign-On (SSO) with Okta for the AppSecEngineer Learning Platform using SAML 2.0. Follow this step-by-step guide to streamline authentication and enhance security for your users. --- [Skip to content](https://help.appsecengineer.com/sso-setup-with-okta-for-appsecengineer-a-step-by-step-guide#main-content) English Show submenu for translations [![AppSecEngineer logo](https://help.appsecengineer.com/hubfs/AppSecEngineer%202023%20logo%20%20glasses%20MASTER-01.svg)](https://www.appsecengineer.com/) - [Home](https://www.appsecengineer.com/) - [Resources](https://www.appsecengineer.com/enterprises/blogs) - [Course Library](https://www.appsecengineer.com/enterprises/courses) Open main navigation Close main navigation - [Home](https://www.appsecengineer.com/) - [Resources](https://www.appsecengineer.com/enterprises/blogs) - [Course Library](https://www.appsecengineer.com/enterprises/courses) - English Show submenu for translations How can we help you? - There are no suggestions because the search field is empty. 1. [AppSecEngineer Knowledge Base](https://help.appsecengineer.com/?hsLang=en) 2. [Integrations](https://help.appsecengineer.com/integrations?hsLang=en) # SSO Setup with Okta for AppSecEngineer: A Step-by-Step Guide ## Configure AppSecEngineer SSO with Okta via SAML 2.0 by setting up app integration, mapping attributes, assigning users, and verifying login access. Follow these steps to configure **Single Sign-On (SSO)** with **Okta** using **SAML 2.0** integration for AppSecEngineer. **Step 1: Sign in to Okta Admin Panel** 1. Log in to your **Okta Admin** account. 2. Navigate to **Applications** → Click **Create App Integration**.   ![Okta Applications dashboard showing AppSecEngineer listed as an active and inactive app](https://help.appsecengineer.com/hubfs/Knowledge%20Base%20Import/edbsn970d8a8e41ab4af1a25fe882809539a15838cdc6d95e637a0a6851a67ded1067390081ee5b3cf7c904a744e8fbcc48ca0aae72dfdefcdc9a87929842daca8eee.png) The image displays the Okta Applications dashboard, where the AppSecEngineer application appears in both active and inactive statuses. The interface includes options to create app integration, browse the app catalog, and assign users to an app. **Step 2: Select SAML 2.0** 1. Choose **SAML 2.0** as the sign-in method. 2. ![Okta interface displaying the 'Create a new app integration' window with SAML 2.0 selected.](https://help.appsecengineer.com/hubfs/Knowledge%20Base%20Import/edbsn970d8a8e41ab4af1a25fe882809539a144cbd7e7d820474e0333b7fd72bb5f037b70bdebd23622cf04c69186c2b2e6cc417f18dcfbd67d357803afb74e094ce0.png) Click **Next** to continue. **Step 3: Configure General Settings** 1. In the **App Name** field, enter a recognizable name like **AppSecEngineer-SSO**. ![Okta interface displaying the 'Create SAML Integration' setup page with 'AppSecEngineer' as the app name.](https://help.appsecengineer.com/hubfs/Knowledge%20Base%20Import/edbsn970d8a8e41ab4af1a25fe882809539a103641680c8e877ddceaf519e4b0de3a8e25e5974de7d6bd68b1212a62b1e16ae6807d6d7ec922836ff436dd4e06993b6.png) The image shows the Okta dashboard with the 'Create SAML Integration' page open. The setup is in the General Settings stage, where the App name is set as AppSecEngineer. There is an option to upload an App logo (optional) and a checkbox for App visibility (allowing users to hide the application icon). 2. Click **Next** to proceed. **Step 4: Configure SAML Settings** 1. In the **Single Sign-On URL**, enter: `https://auth.learning.appsecengineer.com/saml2/idpresponse` 2. In the **Audience URI (SP Entity ID)**, enter: `urn:amazon:cognito:sp:us-east-2_FJ1zCXvmb` 3. Set **NameID Format** to **EmailAddress**. ![Okta SAML Settings page with SSO URL, Audience URI, and user attributes configured for AppSecEngineer](https://help.appsecengineer.com/hubfs/Knowledge%20Base%20Import/edbsn970d8a8e41ab4af1a25fe882809539a114c15c7bffe4d2460d911ee5edc7050cc9c71a0400becc11d8d40c50fdd462f48411fb835955a5356ae65f92c0dee37e.png) The image displays the SAML Settings in Okta for AppSecEngineer, showing the Single Sign-On (SSO) URL, Audience URI (Amazon Cognito), Name ID format (EmailAddress), and application username settings. There is also an option to add attribute statements. **Step 5: Attribute Mapping** Map the attributes as follows: - **Email** → `user.email` - **First Name** → `user.firstName` - **Last Name** → user.lastName `` ![Okta SAML attribute statements configuration with email, given name, and surname mappings.](https://help.appsecengineer.com/hubfs/Knowledge%20Base%20Import/edbsn970d8a8e41ab4af1a25fe882809539a1ceb8fc63053355442596e53eda572a0e7fd2c3bb767f6f8a1c65b21a87a39e4358ae87402a927c937f47d96a6a68cb44.png) The image displays the attribute statements section in Okta's SAML settings. It maps the email, first name (given name), and last name (surname) to corresponding user attributes. The option to add another attribute statement is visible, along with a section for group attribute statements. **Step 6: Finalizing the Application Setup** 1. Select **"This is an Internal App"** and click **Finish**. ![Okta Create SAML Integration final step with internal app selection.](https://help.appsecengineer.com/hubfs/Knowledge%20Base%20Import/edbsn970d8a8e41ab4af1a25fe882809539a194fd8f511a8b0e889c4acd0b6fda43665300d2540a7cc737c9f3529272894fdb210c2d809b4d327735f2ba47f8d9940e.png) Final step of Okta SAML integration with an internal app selection option. If you're looking for a broader SSO setup beyond Okta, check out our detailed guide on Integrating SSO (Single Sign-On) for seamless authentication across platforms."**Step 7: Retrieve Metadata URL** 1. In the **Application Sign-On** section, locate the **Metadata URL**.   ![Okta SAML 2.0 sign-on settings with metadata details and relay state for Amazon Cognito.](https://help.appsecengineer.com/hubfs/Knowledge%20Base%20Import/edbsn970d8a8e41ab4af1a25fe882809539a1c7743abfb311d039112e2e25fab48dd5b3b0620eb79b6db8ce99879ab026971a8217a34384c6671675ee127f426cd5d9.png) Okta SAML 2.0 sign-on configuration showing relay state and metadata URL for integration with Amazon Cognito.   2. Copy and share this URL with the AppSecEngineer team. Need to configure SSO with Auth0 instead of Okta? Follow our step-by-step guide on SSO Setup for AppSecEngineer with Auth0 for seamless authentication. **Step 8: Assign Users & Groups** 1. Ensure that the appropriate **users** or **user groups** are assigned to this application. 2. Only assigned users will have ****SSO login permissions.**** --- ### 🎯 **Next Steps:** ✅ Verify the integration by logging into **AppSecEngineer using SSO**. ✅ If any issues arise, check user assignments and attribute mappings in Okta. - [Getting started](https://help.appsecengineer.com/getting-started?hsLang=en#main-content) - [Welcome to AppSecEngineer](https://help.appsecengineer.com/getting-started?hsLang=en#welcome-to-appsecengineer) - [ILT (Instructor Led Training)](https://help.appsecengineer.com/getting-started?hsLang=en#ilt-instructor-led-training) - [Onboarding Guide](https://help.appsecengineer.com/getting-started?hsLang=en#onboarding-guide) - [Platform Navigation](https://help.appsecengineer.com/getting-started?hsLang=en#platform-navigation) - [Quick Start Guide](https://help.appsecengineer.com/getting-started?hsLang=en#quick-start-guide) - [Integrations](https://help.appsecengineer.com/integrations?hsLang=en) - [Sandbox](https://help.appsecengineer.com/sandbox?hsLang=en) - [Achievement](https://help.appsecengineer.com/achievement?hsLang=en) - [Roadmap](https://help.appsecengineer.com/roadmap?hsLang=en) - [Interviews](https://help.appsecengineer.com/interviews?hsLang=en) - [Course recommendations](https://help.appsecengineer.com/course-recommendations?hsLang=en) - [AppSecFlag](https://help.appsecengineer.com/appsecflag?hsLang=en) - [Team Manager](https://help.appsecengineer.com/team-manager?hsLang=en) - [Creator Studio](https://help.appsecengineer.com/creator-studio?hsLang=en) - [Onboarding Guide](https://help.appsecengineer.com/onboarding-guide?hsLang=en) - [Certification Pricing](https://help.appsecengineer.com/certification-pricing?hsLang=en) - [Tournaments](https://help.appsecengineer.com/tournaments?hsLang=en) - [Bootcamps](https://help.appsecengineer.com/bootcamps?hsLang=en) - [Hands On Labs](https://help.appsecengineer.com/hands-on-labs?hsLang=en) - [Users & Teams](https://help.appsecengineer.com/users-teams?hsLang=en#main-content) - [Users](https://help.appsecengineer.com/users-teams?hsLang=en#users) - [Teams](https://help.appsecengineer.com/users-teams?hsLang=en#teams) - [Challenges](https://help.appsecengineer.com/challenges?hsLang=en#main-content) - [For individuals](https://help.appsecengineer.com/challenges?hsLang=en#for-individuals) - [For Admins](https://help.appsecengineer.com/challenges?hsLang=en#for-admins) - [Report](https://help.appsecengineer.com/report?hsLang=en#main-content) - [User / Team Level Reports](https://help.appsecengineer.com/report?hsLang=en#user-team-level-reports) - [Feature Level Reports](https://help.appsecengineer.com/report?hsLang=en#feature-level-reports) - [Assignments](https://help.appsecengineer.com/assignments?hsLang=en#main-content) - [For Individuals](https://help.appsecengineer.com/assignments?hsLang=en#for-individuals) - [For Admins](https://help.appsecengineer.com/assignments?hsLang=en#for-admins) - [Learning Journeys](https://help.appsecengineer.com/learning-journeys?hsLang=en) - [Certifications](https://help.appsecengineer.com/certifications?hsLang=en) - [Pricing](https://help.appsecengineer.com/pricing?hsLang=en#main-content) - [Trial & Queries](https://help.appsecengineer.com/pricing?hsLang=en#trial-queries) - [Subscription Cancellation](https://help.appsecengineer.com/subscription-cancellation?hsLang=en) - [Home](https://www.appsecengineer.com/) - [Resources](https://www.appsecengineer.com/enterprises/blogs) - [Course Library](https://www.appsecengineer.com/enterprises/courses) [![AppSecEngineer logo](https://help.appsecengineer.com/hubfs/AppSecEngineer%202023%20logo%20%20glasses%20MASTER-01.svg "AppSecEngineer logo")](https://www.appsecengineer.com/) [mailto:email@email.com](mailto:email@email.com) Copyright © 2026,