Okta SSO
Single Sign-On (SSO) with Okta enables organizations to access Asset Panda Pro securely using centrally managed Okta identities. By authenticating users through Okta, teams can reduce password fatigue, minimize login-related support requests, and enforce consistent security policies across the organization. Once configured, users can sign into Asset Panda Pro using their existing Okta credentials, enabling a seamless and secure authentication experience.
Prerequisites
Active Asset Panda Pro subscription with Administrator access
Okta tenant with Admin or Super Admin permissions
Users created in Okta with email addresses that match Asset Panda user accounts
Configure SSO in Okta
Set up Asset Panda as a SAML 2.0 application in Okta and generate the IdP Metadata file required by Asset Panda.
Create a SAML Application
Sign into the Okta Admin Console.
Navigate to Applications > Applications.
Click Create App Integration.
Select SAML 2.0 and click Next.
Enter an App name (for example, Asset Panda SSO).
Optionally, upload an app logo.
Click Next.
Provide the following values to configure SAML settings:
Single sign-on URL (ACS URL): Use the Assertion Consumer Service (ACS) URL provided by Asset Panda.
Audience URI (SP Entity ID): Use the same value as the ACS URL, unless otherwise instructed.
Name ID format: Select EmailAddress.
Application username: Set to Email.
For Attribute Statements, configure the following attribute mapping to ensure proper user identification (recommended):
Name
Value
user.email
Click Next, review the configuration, and click Finish.
Assign users
In Okta, go to the Assignments tab.
Assign users or groups that should have access to Asset Panda Pro.
Download/copy IdP Metadata
Go to the Sign On tab of the Asset Panda application in Okta.
Locate the SAML 2.0 section.
Download or copy and create the IdP Metadata XML file. This file will be uploaded to Asset Panda in the next step.
Configure SSO in Asset Panda
After completing the Okta configuration, set up SSO in Asset Panda using the IdP Metadata file.
Log into Asset Panda Pro with an administrator account
Navigate to
Settings > Preferences > Single sign-on (SSO).Click Add new SSO.
Under Select Your SSO Provider, choose SAML.
Complete the following fields:
Enable Type
Enable for all users: Applies SSO to all users
Enable for selected domains: Applies SSO only to specified email domains
Selected Domains: When domain-based SSO is enabled, enter one or more email domains (for example,
company.com) and press Enter.Connection Name: Enter a descriptive name for the SSO connection (for example, Okta SSO)
Upload the IdP Metadata XML file downloaded from Okta. You can drag and drop the file or click Browse to upload it.
Click Save. Asset Panda automatically extracts the required SAML configuration and certificates from the metadata file.
Enable and verify SSO
Ensure the newly added SSO connection shows a status of Enabled.
Open a private or incognito browser window.
Navigate to the Asset Panda Pro login page.
Enter your email address and proceed with SSO login.
If domain-based SSO is configured, you may be prompted to re-enter your email address.
Authenticate through Okta and confirm you are redirected to the Asset Panda Pro dashboard.
Notes and considerations
Asset Panda uses the IdP Metadata file to configure all SAML settings automatically. Manual entry of ACS URLs, Entity IDs, or certificates is not required.
User email addresses in Okta must exactly match user email addresses in Asset Panda.
If multiple SSO connections exist, ensure domain settings do not overlap.
Troubleshooting
Login fails after authentication
Verify the user is assigned to the Asset Panda Pro application in Okta.
Confirm the user’s email address matches the Asset Panda Pro user record.
SSO button is not displayed
Check that the SSO connection status is Enabled.
Confirm the user’s email domain matches the configured domain (if domain-based SSO is used).
Certificate or metadata errors
Re-download the IdP Metadata file from Okta and re-upload it in Asset Panda Pro.
Last updated