Q2 as SAML 2.0 Identity Provider and Okta as Service Provider, IdP Single Sign-On URL Setting

Question

Dear Team We plan to leverage the SSO extension and use Q2 a SAML 2 0 IdP Also we plan to use Okta as a Service Provider and configure Q2 as IdP within Okta as per https help okta com en prod Content Topics Security idp add saml htm One of the settings within Okta is the IdP Single Sign On URL For a dev environment I guess we can use https stack q2developer com sdk mycompany ardent uux aspx login What would the URL be in production where there are multiple FIs Is the URL unique or does it change for each FI The Okta Admin Console accepts only one SSO URL per IdD Thank you

Ryan Hollister · Answer

Hey Vito Thanks for the question The short answer is yes the URL would be unique for every FI The longer answer is that I think it doesn t much matter My expectation of what that IdP Sign Sign On URL is used for is when the end user shows up at the Service Provider your app in this case and is not current signed in your app would use it to redirect the end user to the IdP Sign On URL This is not a likely scenario with our OLB SSOs so I would think that setting could be left blank or filled with some default value and not have any negative impact

Answers