Authentication
SAML SSO
Authentication
SAML SSO
Learn how to authenticate into Tracecat with SAML SSO
Supported Identity Providers
- Okta
- Microsoft Entra ID
Configuration
In your .env file, make sure you have the following value set.
Instructions
1
Create an SAML app
Go to Applications and select Add Application. Select SAML 2.0 and click on Create.
2
Configure ACS endpoint
Set the Single sign-on URL to https://<your-tracecat-instance>/api/auth/saml/acs.
3
Configure Audience Restriction
Set the Audience Restriction to https://<your-tracecat-instance>/api.
4
Configure SAML settings in environment variables
Set the following environment variables in your .env file:
SAML_IDP_METADATA_URL: Okta metadata URL
5
Restart Tracecat instance
Restart Tracecat to apply the changes.
6
Test SSO configuration
Navigate to your Tracecat instance and click on the Login button. You should be redirected to Okta for authentication.