# How to configure SAML authentication settings in Central Server for Okta SSO?

**Last Updated On**: 22 Jul 2026  
**4 minutes read**

## Description

This document will walk you through the steps required to configure SAML Authentication settings in Endpoint Central Server on-premises for Okta. Refer to this [site](https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/saml-authentication-with-sso-cloud.html) if you are looking to integrate Central Server cloud with Okta SSO.

## Installation Steps

1. Login to Okta. Click on **Admin** tab. Navigate to **Applications**.  
   ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta1-select-application-tab.webp)

2. Click on **Create App Integration**.  
   ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-click-on-create-app-integration.webp)

3. Choose **SAML 2.0** and click on **Next**.  
   ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-select-saml2.0.webp)

4. Enter the Service Provider's name in **App name**, that is, **Endpoint Central Server**. Click on **Next**.  
   ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-click-on-next-1st.webp)

5. In **Endpoint Central Server**, navigate to **Admin** tab and select **SAML Authentication**. Choose configuration by downloading the **certificate**. Copy the **Entity ID** and **Assertion Consumer URL**.  
   ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-choose-config.webp)

6. In Okta, paste the **Assertion Consumer URL** against **Single sign on URL**. Paste the **Entity ID** against **Audience URI (SP Entity ID)**.  
   ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-pasting-entity-id.webp)

7. Click on **Next**.  
   ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-click-on-next-2nd.webp)

8. Choose **I'm a software vendor. I'd like to integrate my app with Okta**. Click on **Finish**.  
   ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-click-finish.webp)

9. Navigate to **Assignments** tab.  
   ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-navigate-to-assignments-tab.webp)

10. Select **Assign**. You can choose to **Assign to People** or **Assign to Groups**.  
    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-assign-to-user-or-group.webp)

11. Choose user or group and click on **Assign**. You can choose to **Assign to People** or **Assign to Groups**. Click on **Done**.  
    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-assign-ec-to-people.webp)

12. Provide **Username** that matches with the admin → Provide user administration page details or mail address that matches with admin → User administration page. Click on **Save and Go Back**.  

    **Note**  
    **Domain users need to provide their details in the following format - domain\username.**

    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-save-and-go-back-1.webp)

    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-save-and-go-back-2.webp)

    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-save-and-go-back-3.webp)

13. Click on **Done**.  
    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-after-ec-assignment-click-on-done.webp)

14. Navigate to the **Sign On** tab.  
    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-navigate-to-sign-on-tab.webp)

15. Click **View IdP metadata**. Download Identity Provider metadata.  
    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-click-on-view-idp-metadata.webp)

16. In **SAML Authentication** settings of **Endpoint Central Server**:

    - Select **IdP** as **Others**.  
    - Enter **IdP name** as **Okta**.  
    - Select **Username** as **Name ID** or select **Username** as **Mail ID** with respect to the data provided in **Step 12**.  

    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-select-username-as-name-id.webp)

    Choose **configuration by uploading IdP metadata**. **Browse** and upload the **metadata** file. Click on **Save**.  

    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-save-metadata.webp)

17. In **Endpoint Central Server** login page, choose the new option — **Login with Okta**.  
    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-choose-login-with-okta.webp)

18. Enter the credentials to login.  
    ![SAML Authentication settings for Okta](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/access-management/okta-login-entering-credential.webp)