The user can log in to FTP-Stream service using Okta identity provider.

  1. Login  to your company's Okta account.
  2. Your account need to have administration rights. Go to the administration section.



  3. Go to Applications section and chose "Add Application" -> "Create New App"
                     

  4. Chose SAML 2.0 Sign on method


  5. Provide App name and hit Next button


  6. On the SAML Settings section use following URLs:
    Single sign on URL:
    https://<acme>.ftpstream.com/saml/module.php/saml/sp/saml2-acs.php/<acme>
    Audience URI (SP Entity ID): https://<acme>.ftpstream.com/

    Where <acme> is your FTP-Stream site name.


  7. Now you need to add required attribute "login" which will be passed to the FTP-Stream service on user sign-in.
    This attribute by default is used on FTP-Stream side for user name and user home directory where all files will be available.


    Please note that "login" attribute required only for a default authentication scheme. You can negotiate with support@maytech.net any custom attributes which best suits your workflow. Please see this example.
    If you need to change attributes statements at any point of time after APP has been created just go to the APP settings "General" tab and click "SAML Settings" "Edit" button. You will find SAML attributes statements configuration there.


  8. On final step chose "I'm an Okta customer adding an internal app"


  9. Your newly created APP should now be present in Applications listing.


  10.   Now you need to send your Identity Provider metadata to the FTP-Stream support team. You can find it on APP "Sign On" tab.
    Click Identity  Provider metadata link and download XML file. Please email this file to the support@maytech.net


  11. Now you can assign people or goups from your organization to use FTP-Stream service. Click on "People" or "Groups" tab and select users.
  12. When people assigned to the APP they can access FTP-Stream service on Okta's central console


    or directly on a FTP-Stream service via SSO login button