Migrating Enterprise Application's In Okta

Customer Success will contact you when it's time to delete your current configuration (NOTE DO NOT DELETE THE CURRENT ENTERPRISE APPLICATION)

1. Log in to Dune Security as an Admin via app.dune.security/login and go to app.dune.security/onboarding from the landing page.
   • Click Step 1 “Set Up SSO and Onboarding” and follow the flow alongside the steps below
2. Set Up Single Sign-On (SSO) in Okta Admin Console:
   • Navigate to Applications > Applications.
   • Click Add Application.
   • Select Create New App.
   • Choose Web as the platform and SAML 2.0 as the sign-on method.
     1. Click Create.
     2. Configure SAML Settings:
        1. App name: Enter "Dune Security SSO".
        2. Single Sign-On URL: Enter the ACS URL from your Dune Security platform.
        3. Audience URI (SP Entity ID): Enter the Entity ID from your Dune Security platform.
        4. Attribute Statements:
           1. Name: email
           2. Name format: Unspecified 
           3. Value: ${user.email}
   • Click Next, review the configuration, and click Finish. Assign the Application to Users:
3. Go to the Assignments tab in the Dune Security SSO application.
   1. Assign the application to users or groups as needed.
4. Download the Identity Provider metadata file from the SSO configuration page in Okta and upload it to the Dune Security admin console under the SSO settings.
5. Provision Users from Okta to Dune Security
   1. Enable SCIM Provisioning in Okta:
      • Navigate to the Dune Security SSO application in Okta.
      • Under the App Settings, enable SCIM Provisioning.
      • Go to the Provisioning tab.
      • Click Configure API Integration.
   2. Enable API Integration and enter the SCIM API base URL: https://scim.dunesecurity.io/scim/v2 (Note: This URL has changed)
   3. Unique Identifier Field: email
   4. Select all options for supported provisioning actions.
   5. Authentication Mode: HTTP Header
      1. Enter the SCIM API token obtained from Dune Security under Authorization.
   6. Click Test API Credentials to verify the connection.
   7. Save the configuration.
   8. Configure Provisioning Settings:
      1. Enable Create Users.
      2. Enable Update User Attributes.
   9. Enable Deactivate Users.
   10. Map User Attributes:
   11. Ensure the attributes from Okta match the required attributes in Dune Security.
   12. Assign Users and Groups for Provisioning:
       1. Go to the Assignments tab in the Dune Security SSO application.
       2. Assign the appropriate users and groups that you want to provision to Dune Security.