Setting Up Single Sign-on (SAML) for Your Organization

Note: You will likely need help from your IT team to complete the SSO setup. The person assisting must have Admin access to the HRA Console to view and configure SSO settings.

💡 Learn more about managing user permissions

To begin setup, click the gear icon in the upper-right corner of the screen and select SSO from the dropdown menu.

Once you have accessed the SSO set-up screens, complete the following steps:

• For specific instructions to set up Okta as your SSO provider, click here
• For specific instructions to set up Microsoft 365 as your SSO provider, click here
  
  

Okta Setup Guide

After domain verification, you will be brought to this page within the HRA console:

The two values at the top of the page (Login Callback URL and Entity ID), should be copied to this screen in Okta:

1. Copy Login Callback URL to Single sign-on URL

2. Copy Entity ID to Audience URI (SP Entity ID)

3. Change Application username to Email

Next, from this screen in Okta, copy the Metadata URL:

1. Open this URL in your browser, then CMD+S / Ctrl+S to save the file as an .xml file.

2. From the HRA Console, click Upload File and select the file you just saved. This should populate the three fields below the Upload File button.

3. Upon submitting the page, SSO will be enabled in testing mode.
   Jump to Step 3: Test Your SSO

Microsoft 365 Setup Guide

After domain verification, you will be brought to this page with the HRA console:

The two values at the top of the page (Login Callback URL and Entity ID), should be copied to this screen in Microsoft 365:

1. Copy Login Callback URL to Reply URL (Assertion Consumer Service URL)

2. Copy Entity ID to Identity (Entity ID)

Note: The Attributes & Claims section can remain set to the default values.

Next, download the Metadata URL: 

1. Download the App Federation Metadata URL from Microsoft 365 (see section 3 in the screenshot above)

2. Open this URL in your browser, then CMD+S / Ctrl+s to save the file as a .xml file.

3. From the HRA Console, click Upload File and select the file you just saved

   This should populate the three fields below the Upload File button.

4. Upon submitting the page, SSO will be enabled in testing mode.