Okta SSO Setup via SAML

Organizations: Use your Okta credentials to sign in to HackerOne

Updated this week

You can use your Okta credentials to sign in to HackerOne. To set up SSO via SAML for Okta:

  1. Log in to Okta.

  2. Click the Applications > Applications

    Okta applications menu

  3. Click Create App Integration

  4. Select SAML 2.0 and click Next

  5. Give the APP a name and optionally a logo and click Next

  6. ​Fill in the next SAML Settings values

    • Audience URI (SP Entity ID): hackerone.com

    • Name ID format: EmailAddress

    • Application username: Email

    • Add the following three Attribute Statements

      1. User.firstName, Unspecified, user.firstName

      2. User.lastName, Unspecified, user.lastName

      3. User.email, Unspecified, user.email

    • Update application username on: Create and update

    SAML Settings screen

  7. Click Next

  8. On step 3 select: This is an internal app that we have created.

    Edit SAML integration window

  9. Click Finish.

  10. Click View SAML setup instructions on the Sign On tab to see the SAML 2.0 config values. Keep this page open for setting up SAML for HackerOne in the later steps.

  11. Open HackerOne in a new tab.

  12. Follow the SAML setup instructions here.

    • Copy the Single Sign-On URL and the Signing Certificate from the “Sign On settings” page that you accessed in step 10 and paste them into the corresponding fields during setup.

  13. In OKTA you can Assign the HackerOne application to the people or groups that should have access to the application on the Assignments tab.

    Assign HackerOne application in Okta

Did this answer your question?