Configure SAML SSO

This document contains procedures to configure SAML SSO with Okta and allow it to facilitate employee access to your Lacework Console.

In your Okta account, complete the following steps:

1. Sign in to Okta with administrative privileges.
2. Go to Applications > Applications.
3. Click Create App Integration.
4. For the sign-in method, select SAML 2.0 and click Next.
5. Enter a name for your application and click Next.
6. Copy the Lacework service provider XML metadata into the provided fields.
   • Single sign-on URL: https://youraccount.lacework.net/sso/saml/login
   • Audience URI (SP Entity ID): https://lacework.net
   • Name ID format: EmailAddress
   • Application username: Email
     
7. Click Next.
8. Select I’m an Okta customer adding an internal app and This is an internal app that we have created.
9. Click Finish.
10. From the Sign on Methods page, download and save the IDP metadata.
11. Complete the setup in the Lacework Console. See Enable SAML in the Lacework Console.

To enable JIT user provisioning, see Configure SAML JIT with Okta.

The following Lacework logo meets Okta sizing requirements for the optional App logo under General Settings. To save the image to your computer, right-click it and click Save Image As....