Single Sign On (SSO) allows users to use a single login for multiple applications, simplifying the lives of both IT and your team on Drift. Our SAML 2.0 Implementation will allow team members to sign in securely through any identity provider.

Here's a step-by-step guide for Okta. If you have questions about implementing another Identity Provider, please chat in and our team will be able to assist.

This setup might fail without parameter values that are customized for your organization. Please use the Okta Administrator Dashboard to add an application and view the values that are specific for your organization.

The Okta/Drift SAML integration currently supports the following features:

• SP-initiated SSO
• IdP-initiated SSO
• JIT (Just In Time) Provisioning

Billing Plan: Single Sign On is only available for Premium and above plans

Intended Audience:

• Admin

In this article, we'll cover:

• Configuration Steps
• Adding Users to Drift with Okta Connected

For more information on the listed features, visit the Okta Glossary.

Configuration Steps

1. Login to your Drift account as an administrator.

2. Navigate to Settings > Organization Settings > Security > Configure SAML authentication and verify your domain so when a user tries to sign in with an email address under that domain, they will be redirected to Okta. 
   
   
   Configure Drift to communicate with your Identity Provider

3. Identity Provider Entity ID: Copy and paste the following:

   Sign into the Okta Admin Dashboard to generate this variable.

4. SAML 2.0 HTTPS Redirect Endpoint: Copy and paste the following:

   Sign into the Okta Admin Dashboard to generate this variable.

5. Identity Provider Public Key: Save the following certificate as okta.pem, then upload it to Drift.

   Sign into the Okta Admin Dashboard to generate this variable.
   

    

• Require signed assertions in SAML response: Enable this option.

• SAML Request Signing: Keep this option disabled.
  
  
  Then in Okta, select the Sign On tab for the Drift SAML app, then click Edit. Next to the Default Relay State enter: https://app.drift.com and click Save.     

  • You can find the Drift app in Okta here: https://www.okta.com/integrations/drift/.  Click '+Add Integration' to add Drift to your Okta instance.

• Notes

  The relay state ID in Okta cannot be left blank. Please make sure your relay state ID is listed as: https://app.drift.com/

  The following SAML attributes are supported:

  Name	Value
  Name	user.firstName user.lastName

   

  SP-initiated SSO

• 1. Go to https://start.drift.com/ URL.

Enter your email, then click Next:

Adding Users in Drift With Okta Connected

To add users to Drift once you've connect Drift and Okta:

1. Add users on the Okta side and assign them the Drift app within Okta. This will make the user an Admin in Drift by default
2. Go into Drift and assign the user the desired Drift role
3. Have the user login to Drift via Okta

For more information on this part of the process, please check out this Okta help doc.