SAML SSO setup

​

Create a group to manage access

1. Log in to your Okta instance as an Administrator.
2. Select Groups on the left.
3. Click Add group.
4. Enter a name and description for the group. This group will be used to keep users consistent between the SAML app and its related bookmark app.
5. Click Save.
6. Click the name of the group that you created.
7. Click Assign people to assign users you would like to have access to this ClickHouse organization.

​

Create a bookmark app to enable users to seamlessly log in

1. Select Applications on the left, then select the Applications subheading.
2. Click Browse App Catalog.
3. Search for and select Bookmark App.
4. Click Add integration.
5. Select a label for the app.
6. Enter the URL as https://console.clickhouse.cloud/?connection={organizationid}
7. Go to the Assignments tab and add the group you created above.

​

Create a SAML app to enable the connection

1. Select Applications on the left, then select the Applications subheading.
2. Click Create App Integration.
3. Select SAML 2.0 and click Next.
4. Enter a name for your application and check the box next to Don’t display application icon to users then click Next.
5. Use the following values to populate the SAML settings screen.

   Field	Value
   Single Sign On URL	Copy the Single Sign-On URL from the console
   Audience URI (SP Entity ID)	Copy the Service Provider Entity ID from the console
   Default RelayState	Leave blank
   Name ID format	Unspecified
   Application username	Email
   Update application username on	Create and update

6. Enter the following Attribute Statement.

   Name	Name format	Value
   email	Basic	user.email

7. Click Next.
8. Enter the requested information on the Feedback screen and click Finish.
9. Go to the Assignments tab and add the group you created above.
10. On the Sign On tab for your new app, click the Copy metadata URL button.
11. Return to Add the metadata URL to your SAML configuration to continue the process.