Setting up Okta SSO for signing in to Cloudinary

Sign in with SSO is a feature available for customers on Enterprise / Custom Plans.

In order to set up your account for Okta SSO, please follow these steps:

Note: these instructions are for the Classic UI - you can switch to that from the drop-down at the top-right menu of your Okta console.

1. Sign in to your Okta admin console (https://<orgname>-admin.okta.com). 
2. Click 'Add Applications' in the 'Shortcuts' menu on the right side of the page.
3. Click the 'Create New App' green button.
4. Choose SAML 2.0 as the type of Application, and click Create.
5. Fill in the form:

• Choose an app name (e.g. 'Cloudinary').
• Upload a logo from this link.
• Click Next.
• Fill in the form:

1. Single sign on URL: https://cloudinary.com/saml/consume
2. Audience URI (SP Entity ID): https://cloudinary.com/saml
3. Name ID format: EmailAddress
4. Application username: Email
5. Click Next, and then Finish.

• Obtain your metadata URL. In the screen that appears, under the 'Sign On' tab, there should be a link 'Identity Provider Metadata'. Copy that link (it should look like: https://<orgname>.okta.com/app/<random_string>/sso/saml/metadata).

Update: You can now log in to your account and under the Users tab in the Settings page (https://cloudinary.com/console/settings/users) you can paste in the metadata URL and save your changes.

Good luck!