How do I setup SSO for my Ably account?

Please note: this feature is in preview and needs to be activated by Ably for your account. Please contact us if you would like to try it. 

SAML single sign-on (SSO) makes it possible for your Ably enterprise account members to authenticate through an identity provider (IdP) of your choice. Different IdP's can support different options and parameters for SAML, so please contact us to confirm your provider is compatible. 

If your IdP is Okta, follow these steps to connect your account:

1. Login as the owner of the enterprise account for which you want to enable SSO.
2. Navigate to the Ably → Account Settings page.
3. Scroll down to the Authentication Settings section and toggle on the Enable Single Sign-On option. This will display an SSO settings form. Take note of the Single sign on URL and Audience URI values, as these will be required in the next step.
4. Follow the official Okta guide to enable SSO from Okta for the Ably application. Additional notes:
   1. Upload Ably logo;
   2. For the Name ID format field, select the EmailAddress option;
   3. For the Application username field, select the Email option;
   4. Ably requires users to present their full name. Okta can share user profile fields such as first name and last name values out as SAML attributes.
5. Remember to assign users to the newly created Okta application.
6. Locate the Identity Provider metadata provided by Okta for the new Ably application and navigate back to the Ably → Account Settings page.
7. Complete the form with the provided by Okta values for:
   • Identity Provider Single Sign-On URL
   • Identity Provider Issuer
   • X.509 Certificate
8. Click on Save authentication settings