Configuring SAML SSO with Okta

Prerequisites

Okta admin access, Dataroom Owner role, your workspace ID (Settings → General).

SAML setup

1. In Dataroom, open Settings → Authentication → SSO and pick Okta SAML.
2. Dataroom shows your SP Entity ID, ACS URL, and Audience. Copy these.
3. In Okta, create a new SAML 2.0 app. Paste the values from step 2.
4. Set Name ID format to EmailAddress. Add attribute mappings: email, firstName, lastName.
5. Download the Okta IdP metadata XML and upload it back to Dataroom.
6. Assign your Okta users to the new app. Test SSO with a user, then enable enforcement.

SCIM provisioning

1. In Dataroom, open Settings → Authentication → SCIM and generate a SCIM token.
2. In Okta, enable Provisioning on the app and paste the SCIM base URL + token.
3. Pick the actions to enable: Create users, Update user attributes, Deactivate users.
4. Map attributes (email, firstName, lastName, groups → roles).
5. Push existing assignments. Users are provisioned within seconds.