Setting up SAML 2.0 SSO App on Okta

SSO Admins can follow the steps in the guide to configure SAML single sign-on for the FranklinCovey Impact Platform with Okta. Find more detailed information from Okta about setting up SAML single sign-on in their interface. Please note: You will likely need the proper administrative privileges to follow the configuration instructions.

Setting up SAML single sign-on requires you to configure settings on Okta and the Admin Platform. Start by creating the FranklinCovey app in Azure. Then you can use your metadata to configure the Admin Platform SSO Management page settings using the instructions linked at the end of the article.

Create FranklinCovey App in Okta

•  Log in to your Okta account and navigate to the Admin Dashboard.
• Click on the Applications tab and select Applications.

• Choose Create App Integration

• Select SAML 2.0 and select Next

• Name your app FranklinCovey All Access Pass and click Next.

• Under General Settings, enter the Single Sign-On URL and Audience URL as shown below.

• Under Attribute Statements, map the attributes email, firstName, and lastName without any spaces.

• Select Next

• Under Feedback, choose "I'm a software vendor, I'd like to integrate my app with Okta," then Finish to create your new SSO app.

• To grant users access to the app, navigate to the Assignments tab.
• Click Assign and select the users or groups you want to grant access to.
• Choose the app you just created and set the appropriate permissions.

Create Bookmark Apps for the Admin Platform and Impact Platform

The FranklinCovey All Access Pass consists of two platforms: the Admin Platform, where admins access their admin functions to control their users and content, and the Impact Platform, where learners access their content, learning tools, and 360 Diagnostic.

We recommend hiding the application tile and creating bookmark apps for the Admin and Impact Platforms so that admins and learners can access their platforms conveniently from their Okta Dashboard.

1. Be sure to log into the Okta portal as an Admin

2. Expand the Applications drop-down in the left pane, then click Applications

3. Click Browse App Catalog

4. Search for "Bookmark App," select it from the list of results, and click Add in the left pane

5. Choose an app name. In this example, "Type the desired name," which will be the display name

6. Copy the URL to directly link into the URL box

7. These are the direct links to access the Admin and Impact Platforms:

   • Admin Platform URL for Admins and Facilitators: https://subdomain.allaccesspass.com/ 

   • Client-Specific Impact Platform URL: https://app.franklincovey.com/login/?_c_id=clientsubdomain

   • The client-specific Impact Platform URL will allow learners to log in directly to SSO without entering their email address first. 

Note: You can use one of the attached logos for your Impact and Admin Platform bookmarks.

1. Click Save

2. Assign users to test

NEXT STEP: Now that you have successfully created a new SAML 2.0 SSO app on Okta, refer to the Enabling SAML Single Sign-on for FranklinCovey Site help article to input your metadata and enable SSO on the Impact Platform.