This article explains how to configure single sign-on (SSO) for Cye Cloud Posture Solution with Okta as your SAML 2.0 identity provider.
Overview
Cye Cloud Posture Solution supports a wide variety of SAML 2.0 Identity Providers (IdPs), so your team can sign in to the console with the credentials it already uses. For SAML 2.0, the console uses AWS Cognito, which does not support IdP-initiated flows: users always start from the SSO login page at console.solvo.cloud/loginsso, not from the Okta dashboard.
Create & Configure the Okta App: Add a custom SAML 2.0 app in Okta with the console's single sign-on URL, audience restriction, and three attribute statements (first name, last name, email).
Exchange Metadata: Download the IdP metadata file from Okta and upload it in the console's SSO settings.
Recognize SSO Users: Users who sign in through SSO appear on the users management page with the external label.
1. Create a custom SAML 2.0 app in Okta
1. Create a custom SAML 2.0 app in Okta
Okta needs to know where to send SAML responses and which user attributes to include in them.
Create a custom SAML 2.0 app in the Okta console by following Okta's instructions.
In the SAML Settings section, enter:
Single sign on URL:
https://signin.solvo.cloud/saml2/idpresponseAudience Restriction:
urn:amazon:cognito:sp:us-east-1_U0FR6cmpe
Fill out Attribute Statements as follows:
Name | Name Format | Value |
| URI Reference | user.firstName |
| URI Reference | user.lastName |
| URI Reference | user.email |
2. Download the IdP metadata file
2. Download the IdP metadata file
The console uses this file to trust Okta as your identity provider.
Download the IdP XML metadata file for your SAML app. Okta explains where to find it in Location to download Okta IDP XML metadata for a SAML app.
3. Set up the SSO integration in the console
3. Set up the SSO integration in the console
Log in to the console and open the SSO settings page.
In the SSO settings dialog, choose the metadata file you downloaded from Okta.
Click Configure SSO.
External users
External users
A user who signs in through an SSO integration is an external user. The users management page shows these users with the external label.
Wrap-up / Next Steps
Wrap-up / Next Steps
Sign in with SSO: Start from the SSO login page. Signing in from the Okta dashboard (IdP-initiated flow) is not supported.
Review SSO users: Open the users management page to see which users signed in through Okta.
Use a different IdP: For Microsoft Entra ID, see Setting Up Azure Entra ID SSO.