Configure Okta as a HyperComply SAML IDP

This guide will take you through the steps for configuring Okta as the SAML IDP for your HyperComply account, allowing your users to authenticate to HyperComply through Okta instead of the usual email/password combination.

1. First we’ll log into HyperComply and copy a value we’ll need for Okta configuration.
2. Next we’ll create the HyperComply Okta “Application” and configure it for HyperComply SAML.
3. Finally we’ll copy some values from our new Okta Application into HyperComply so HyperComply can securely validate SAML assertions from Okta.

HyperComply Configuration

1. Navigate to https://app.hypercomply.com/settings/saml_config
2. Copy the value of the “SAML ACS Endpoint” at the bottom of the screen.
3. Keep this tab open and complete the steps below, you will need to enter some values from Okta on this screen at the end of this process.

Okta Application Creation

1. Log into Okta as an administrator
2. Navigate to Applications/Applications and click “Create App Integration”
1. Choose “SAML 2.0” and click “Next”
2. Enter display details for the new Application as normal. Click “Next”.
3. Paste the “SAML ACS Endpoint” URL copied from the HyperComply settings into the “Single sign on URL” and “Audience URI” fields.
4. Set “Name ID format” to “EmailAddress”
5. Set “Application username” to “Email”
6. Add these attributes to the “Attribute Statements” section:

1. Click “Next” then “Finish”
2. In the “Sign On” tab of the newly created “HyperComply” application, click the “View Setup Instructions” button.
   Note: this section requires copying values from Okta into the HyperComply SAML configuration form opened in the “HyperComply Configuration” section above. If you don’t have the tab open anymore, return to the page here: https://app.hypercomply.com/settings/saml_config.
1. In Okta: copy the value from the “Identity Provider Single Sign-On URL” field
1. In HyperComply: paste the value into the “IDP Endpoint URL” field
2. In Okta: copy the value from the “Identity Provider Issuer” field
1. In HyperComply: paste the value into the “IDP Entity ID” field
3. In Okta: copy the value from the “X.509 Certificate” field
1. In HyperComply: paste the value into the “IDP Certificate” field
4. In HyperComply: check the “Enable SAML” checkbox and click “Save”.

At this point you have connected your Okta SAML IDP to HyperComply, allowing users to log into HyperComply from Okta. Any user that logs into HyperComply via Okta will have an account created for them (if they don’t already have an account). Allowing Okta users to log into HyperComply can be done by adding users to the HyperComply “Application” you created above in Okta.