Setting Up SAML 2.0 SSO with Okta
This guide will walk you through the process of configuring Single Sign-On (SSO) via SAML 2.0 between Okta and Voxjar.
Prerequisites
Before you begin, make sure you have:
An Okta administrator account
Your Voxjar account ID (provided by your account manager)
SAML endpoints for Voxjar (request these from your account manager)
The Voxjar logo (provided by your account manager)
Step 1: Request SAML Integration Information
Contact your Voxjar account manager to receive:
The SAML SSO URL (Single Sign-On URL)
The Audience URI (SP Entity ID)
Your Voxjar account ID
The Voxjar logo for the application integration
Step 2: Create a New SAML Application in Okta
Log in to your Okta Admin dashboard
Navigate to the "Applications" section
Click "Create a new app integration"
In the dialog that appears, select the "SAML 2.0" option (the second option in the list)
Click "Next"
Step 3: Configure General Settings
Enter "Voxjar" as the App name
Upload the Voxjar logo provided by your account manager
Check "Do not display application icon to users"
Click "Next" to proceed to SAML configuration
Step 4: Configure SAML Settings
Enter the following information:
Single sign-on URL: Enter the URL provided by your Voxjar account manager
Use this for Recipient URL and Destination URL: Check this box
Audience URI (SP Entity ID): Enter the Entity ID provided by your Voxjar account manager
Default RelayState: Leave blank
Name ID format: Select "EmailAddress" from the dropdown
Application username: Select "Okta username" from the dropdown
Update application username on: Select "Create and update" from the dropdown
Step 5: Configure Attribute Statements
Add the following attribute statements:
Required Attribute:
Name: account
Value: Your Voxjar account ID (provided by your account manager)
Optional Attribute:
Name: role
Value: Set default role for new users (acceptable values: agent, evaluator, admin)
You can use Okta expressions for dynamic role assignment if needed
Step 6: Complete Setup and Share Information
Click "Next" to finish creating the SAML application
After saving the application, go to the "Sign On" tab
Locate the "Metadata URL" in the SAML settings section (it will be a URL that looks similar to: https://XXXXXXX.okta.com/app/xxxxxxxxxxxxxxxx/sso/saml/metadata)
Copy this URL and share it with your Voxjar account manager
Also provide your company email domain(s) to your account manager (e.g., @yourcompany.com)
Important Notes for User Access
Direct sign-in from the Okta dashboard is not supported
Users must sign in through the Voxjar application by:
Navigating to the Voxjar application: https://app.voxjar.com/signin
Clicking "Sign in with SSO"
Entering their email address
Completing authentication through Okta
Being redirected back to Voxjar
The “role” attribute is only read on a user’s first sign in. Managing users’ Vojxar roles can then be updated from https://app.voxjar.com/settings/team
Troubleshooting
If users encounter issues when signing in:
Verify the "account" attribute is correctly configured with your Voxjar account ID
Ensure the user's email domain matches what was provided to Voxjar
Check that roles are assigned correctly (agent, evaluator, or admin)
Confirm that the Metadata URL has been shared with your Voxjar account manager
Confirm that the username of those assigned are email addresses
For additional assistance, please contact your Voxjar account manager.