Even though this guide uses Okta as an example, you can follow this guide to configure SSO for any identity provider (IdP) that supports the SAML 2.0 protocol.

Configuration

In your .env file, make sure you have the following value set.

TRACECAT__AUTH_TYPES=sso

Prerequisites

  • Create an Okta account. You can sign up for a 30-day free trial here.

Instructions

1

Create an Okta SAML app

Go to Applications and select Add Application. Select SAML 2.0 and click on Create.

2

Configure SAML settings in environment variables

Set the following environment variables in your .env file:

  • SAML_IDP_ENTITY_ID: Okta entity ID
  • SAML_IDP_REDIRECT_URL: Okta redirect URL
  • SAML_IDP_CERTIFICATE: Okta SAML X.509 certificate as text
  • SAML_IDP_METADATA_URL: Okta metadata URL
3

Restart Tracecat instance

Restart Tracecat to apply the changes.

4

Test SSO configuration

Navigate to your Tracecat instance and click on the Login button. You should be redirected to Okta for authentication.