Xygeni User Guides
  • Welcome to Xygeni
  • Getting Started
    • Create a Free Trial Account
    • Quick start with your code repository
    • Quick start with Xygeni CLI
    • Quick start with a preloaded project
    • Log in to Xygeni
    • Subscribe to Xygeni
  • Introduction to Xygeni
    • Key Concepts
      • Projects in Xygeni
      • Project Baseline
      • Detected Issues
      • Remediation Actions
      • Policies
      • Risk Level
      • SDLC Inventory
      • Standards Compliance
      • GuardRails
    • Xygeni Products
    • How Xygeni works
    • Xygeni Web UI Overview
      • Projects Screen
        • Risk Level
    • Integrating Xygeni into your Workflow
    • Prioritization Funnels
      • Custom Funnels
      • Prioritization Criteria (Stages)
        • Reachability
        • Exploitability
        • Fixable
    • Guardrails
    • Generate a SBOM
    • Reports
      • Trends
      • Scan History
    • Supported Integrations
    • Customizations
  • Xygeni Products
    • Application Security Posture Management (ASPM)
      • ASPM User Interface Guide
      • All Risks
        • Statistics
        • Issues Evolution
        • Issue Comparison Between Different Scans
      • Governance
      • Inventory
        • All Assets
        • Repositories
        • Components
        • CI/CD Assets
        • Delivery Assets
        • Systems & Tools
        • Collaborators
      • Health Check
      • Inventory Scanner
        • Inventory Scanner Configuration
        • Inventory Collaborators Scan
      • Importing reports from 3rd party tools
        • External Scanners Supported
          • Report upload for Kiuwan
            • ExportRule (.java)
    • Code Security (SAST)
      • Code Security (SAST) User Interface Guide
        • Risks (SAST)
        • Malicious Code
      • Malware Scanner
        • Malware Scanner Configuration
        • Malware Detectors
      • SAST Scanner
        • SAST Scanner Configuration
    • Open Source (SCA)
      • Open Source (SCA) User Interface Guide
      • Open Source Components
      • Supported Package Managers for dependency resolution
      • Risks (SCA)
      • OSS Prioritization Funnels
      • OSS Auto-Remediation
      • Malware Early Warning (MEW)
        • How Malware Early Warning works
        • Common types of Malware found in open source packages
      • Dependency Scanner
        • Dependency scanner configuration
        • Dependency Analyzers
      • Suspect Dependencies Scanner
        • Suspect Deps Scanner Configuration
        • Suspect Deps Detectors
    • CI/CD Security
      • CI/CD Security User Interface Guide
      • CI/CD Details
      • Build Attestations
      • CI/CD Scanner
        • CI/CD Misconfigurations Scanner Configuration
      • Compliance Scanner
        • Supported compliance standards
    • Secrets Security
      • Secrets User Interface Guide
      • Secrets Scanner
        • Secrets scanner configuration
      • Secret Leaks Handling
        • Secret Leaks Handling
        • How to Prevent Hard-Coded Secrets
        • Secret Leaks Handling CheatSheet
      • Secrets Auto-Remediation
    • IaC Security
      • IaC User Interface Guide
      • IaC Scanner
        • IaC Scanner Configuration
    • Malware
    • Build Security
      • Build Security Concepts
      • Build Attestations
      • Attestation format
      • How SALT works
      • Installing Salt CLI
      • Salt Command-Line Reference
      • SALT Architecture
      • SALT How To…​
    • Anomalous Activity Detection
      • Anomalous Activity Detection User Interface Guide
      • Xygeni Sensors
        • Xygeni Sensor for Azure
        • Xygeni Sensor for BitBucket
        • Xygeni Sensor for GitHub
          • GitHub Audit Log Processing
        • Xygeni Sensor for GitLab
        • Xygeni Sensor for Jenkins
        • Anomaly Detection's Detectors
      • Code Tampering Scanner
        • Code Tampering Scanner Configuration
    • Compliance & Malware Insights
      • SSCS Compliance
      • Malicious Packages DB
  • Scan Management
    • Manage Scans
    • Scan History
  • Xygeni Scanner CLI
    • Xygeni Scanners
    • Xygeni CLI Overview
      • Xygeni CLI Prerequisites
      • Xygeni CLI Installation
      • Xygeni CLI Docker Image
      • Xygeni CLI Authentication
        • CLI Authentication with Xygeni
      • SCM, CI/ CD and Container Registry tokens
      • Xygeni CLI Operation Modes
        • Single scan
          • Scanning a docker image
        • Multi Scan
        • Organization scan
      • Xygeni CLI Configuration options
      • Xygeni CLI Output Formats
      • Exporting Xygeni results to 3rd party tools
      • Automatic Remediation
      • Generate SBOM with the Xygeni CLI
      • CLI utils
        • Credentials Encryption
        • Central Configuration
      • Xygeni Guardrails
        • CI/CD Audit Analysis
      • Xygeni CLI Error Codes
      • Xygeni Scanner Reference
  • Xygeni Administration
    • Platform Administration
      • Profile
      • Subscription
      • Users Management
      • Projects Management
      • Groups Management
      • Policies
      • Integrations
        • Xygeni Single Sign-On (SSO) Authentication
          • SSO - OKTA
          • SSO - Microsoft Entra ID
        • Integrate Scanner CLI into CI/CD Systems
          • Azure Pipelines Integration
          • BitBucket Integration
          • CircleCI Integration
          • GitHub Actions Integration
          • GitLab Runner Integration
          • Jenkins Integration
          • Travis CI Integration
        • Git Hooks with Xygeni
        • Collaboration & communication Tools
        • Ticketing Systems
        • Remediation systems
      • Notifications
    • Rest API
  • Support
  • Changelog
    • Version 5.11 - April 11, 2025
    • Version 5.9 – March 26, 2025
Powered by GitBook
On this page
  • Overview
  • How to obtain the information to be sent to Xygeni
  • Create an Okta App
  • Gathering of info to send to Xygeni
  • Assign people/groups to Okta application
  • Sending info to Xygeni and final steps
  • Testing the Okta - Xygeni integration
  • Login from Xygeni
Export as PDF
  1. Xygeni Administration
  2. Platform Administration
  3. Integrations
  4. Xygeni Single Sign-On (SSO) Authentication

SSO - OKTA

PreviousXygeni Single Sign-On (SSO) AuthenticationNextSSO - Microsoft Entra ID

Last updated 28 days ago

Overview

To configure Okta as Identity Provider (IdP) and Xygeni as Service Provider (SP), you should first contact Xygeni to request data needed to properly configure the SAML integration between Okta and Xygeni.

You must provide the following information to Xygeni:

  • IDP Sign on URL: URL of the Identity Provider (or IDP, Okta in this case) against which the Xygeni user is going to authenticate

  • Entity ID or Issuer: Globally unique name for an Identity Provider or a Service Provider, is a URI used to identify the issuer of a SAML request, response, or assertion

  • URL Metadata: URL Metadata is the discovery information that the IDP exposes, to securely interoperate

  • Signing Certificate : Allows the Service Provider (or SP, Xygeni in this case) to verify the authenticity of the SAML response

Once submitted above info to Xygeni, you will receive some information back needed to properly configure the integration. This information will contain:

  • SP Single Sign on URL: SP's URL that processes the SAML response, verifies and validates it.

How to obtain the information to be sent to Xygeni

Create an Okta App

Login to Okta, go to Applications and click on Create App Integration

A new window will open to specify the Sign-in method. Choose the SAML 2.0 option and click Next.

Okta will redirect you to the workflow to create your SAML integration.

Under General Settings, you must first specify App Name (choose whatever name you prefer to identify your app integration, in our example we will use "xy1" )

Upon click on Next, the Configure SAML tab will appear.

There are several frames into this section. First is A - SAML Settings

  • Single sign-on URL : Location where the SAML assertion is sent with a HTTP POST. This is often referred to as the SAML Assertion Consumer Service (ACS) URL for your application.

This value will be provided by Xygeni and it will follow this pattern https://api.xygeni.io/sso/details/[xygeni_customer_id]-[okta_app_name]

In our case, let's say that customer id = 20, then the value would be https://api.xygeni.io/sso/details/20-xy1

Although the exact value for this field will be supplied by Xygeni, at this moment you can enter a dummy value such as above.

  • Audience URI (SP Entity ID) : The application-defined unique identifier that is the intended audience of the SAML assertion. This is most often the SP Entity ID of your application.

This value will be provided by Xygeni and it will follow this pattern [xygeni_customer_id]-[okta_app_name]

In our case, let's say that customer id = 20, so the value would be 20-xy1 Although the exact value for this field will be supplied by Xygeni, at this moment you can enter a dummy value such as above.

Scroll down and click on Next. Then, a new window will appear asking whether you are a customer or partner. Select “I’m an Okta customer adding an internal app” option and click Finish.

Gathering of info to send to Xygeni

Select the app just created and click on Sign on tab

Click on More details and you will find some useful information to be provided to Xygeni.

Copy the above information, download the Signing Certificate and send it to Xygeni.

Assign people/groups to Okta application

Do not forget to assign people to your just created integration app. To do it, select the Assignments tab and include people/groups as needed.

IMPORTANT: The username of Okta must already be an existing Xygeni user !!

Sending info to Xygeni and final steps

Once that you have sent to Xygeni the above information, Xygeni will send back to you :

SP Single Sign on URL: SP's URL that processes the SAML response, verifies and validates it.

Review your Okta application to check that the received value matches the value provided as Single sign-on URL

If they don't match, update the okta app value to the value provided by Xygeni.

Testing the Okta - Xygeni integration

Now, you are able to test the application integration.

Login from Xygeni

To do it you can go to Xygeni login page ( ) and after specifying your login name you will be presented to a page where you can enter your password or click on the Okta button.

https://in.xygeni.io/auth/login