SAML and OKTA single sign-on

Configure SAML authentication for your organization. Users will be able to sign in using their company identity provider.

These values identify DraftPilot to your identity provider. They are shown on the organization SAML settings page for your account; the production values are:

1. Sign in to the Azure Portal

2. Go to Microsoft Entra ID → Enterprise applications

3. Click "New application" → "Create your own application"

4. Name it "DraftPilot" and select "Integrate any other application you don't find in the gallery"

1. In your new application, go to "Single sign-on" → Select "SAML"

2. In "Basic SAML Configuration", click "Edit" and enter:

   • Identifier (Entity ID): your DraftPilot Entity ID (see Service provider information above)

   • Reply URL (ACS URL): your DraftPilot ACS URL (see Service provider information above)

1. In "Attributes & Claims", ensure these mappings:

   • Unique user identifier: user.mail

   • Email: user.mail

   • Name: user.displayname

1. In "SAML Certificates" section, find App Federation Metadata Url

2. Copy that URL (it starts with https://login.microsoftonline.com/)

3. Paste it in the "Identity Provider Metadata URL" field on the left

4. Click "Fetch Metadata" to auto-populate Entity ID, SSO URL, and Certificate

5. Verify the fields are populated, then enable SAML SSO toggle above

1. Go to "Users and groups" in your Azure application

2. Click "Add user/group" to assign users or groups access

1. Sign in to the Okta admin console

2. Go to Applications → Applications

3. Click "Create App Integration" → select "SAML 2.0" → Next

4. Set App name to "DraftPilot" and click Next

1. On the "Configure SAML" step, enter:

   • Single sign-on URL: your DraftPilot ACS URL (see Service provider information above)

   • Audience URI (SP Entity ID): your DraftPilot Entity ID (see Service provider information above)

2. Set Name ID format to "EmailAddress" and Application username to "Email"

1. Under "Attribute Statements (optional)", add these mappings:

   • Email: user.email

   • Name: user.firstName + " " + user.lastName

1. On the "Feedback" step, choose "I'm an Okta customer adding an internal app" and click Finish

2. Open the "Sign On" tab of the new application

3. Find the "Metadata URL" link and copy its address

4. Paste it in the "Identity Provider metadata URL" field on the left

5. Click "Fetch" to auto-populate Entity ID, SSO URL, and Certificate

6. Verify the fields are populated, then enable SAML SSO toggle above

1. Open the "Assignments" tab in your Okta application

2. Click "Assign" → "Assign to People" or "Assign to Groups" to grant access

Need help? Contact support at support@draftpilot.ai