# AWX / SAML / OKTA ?

**URL:** <https://forum.ansible.com/t/awx-saml-okta/31684>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [November 19, 2019, 3:25pm UTC](https://forum.ansible.com/t/awx-saml-okta/31684 "2019-11-19T15:25:04Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Matt\_Barry](https://avatars.discourse-cdn.com/v4/letter/m/8c91f0/32.png) [@Matt\_Barry](https://forum.ansible.com/u/Matt_Barry)\
**Post date:** [November 19, 2019, 3:25pm UTC](https://forum.ansible.com/t/awx-saml-okta/31684/1 "2019-11-19T15:25:04Z")

</div>

Hello,

I’m implementing AWX and attempting to integrate single sign-on using Okta ([okta.com](http://okta.com)). The SAML sign-on button redirects me to Okta correctly, but when I get bounced back I just hit the login page. It seems like the Okta side is configured correctly. When I watch the process with SAML-tracer the only outstanding errors I can see are a pair of 401 requests to e.g. /api/v2/settings/all .

My IDP configuration looks like this:

{  
“okta”: {  
“url”: “”,  
“attr\_user\_permanent\_id”: “urn:oid:1.3.6.1.4.1.5555.610.2.2.1.11”,  
“attr\_username”: “urn:oid:1.3.6.1.4.1.5555.610.2.2.1.11”,  
“x509cert”: “”,  
“entity\_id”: “[http://www.okta.com/](http://www.okta.com/)\<ENTITY\_TOKEN\>”  
}  
}

I’m wondering if there are some obvious places to look for the problem, or if anyone else out there has experience linking up with Okta as an IDP.

Thanks!

-m

---

<div class="post-metadata">

**Author:** ![Matt\_Barry](https://avatars.discourse-cdn.com/v4/letter/m/8c91f0/32.png) [@Matt\_Barry](https://forum.ansible.com/u/Matt_Barry)\
**Post date:** [November 19, 2019, 3:50pm UTC](https://forum.ansible.com/t/awx-saml-okta/31684/2 "2019-11-19T15:50:01Z")

</div>

The request to /sso/complete/saml/ also redirects (302) to /sso/error/ (which bounces back to /#/settings/)

---

<div class="post-metadata">

**Author:** ![Matt\_Barry](https://avatars.discourse-cdn.com/v4/letter/m/8c91f0/32.png) [@Matt\_Barry](https://forum.ansible.com/u/Matt_Barry)\
**Post date:** [November 19, 2019, 4:17pm UTC](https://forum.ansible.com/t/awx-saml-okta/31684/3 "2019-11-19T16:17:58Z")

</div>

Updated configuration:

{  
“okta”: {  
“url”: “…”,  
“attr\_user\_permanent\_id”: “userName”,  
“attr\_email”: “email”,  
“attr\_username”: “userName”,  
“x509cert”: “…”,  
“attr\_first\_name”: “firstName”,  
“attr\_last\_name”: “lastName”,  
“entity\_id”: “…”  
}  
}