Setup ClassRanked Single Sign-on with Okta

Prerequisites from ClassRanked

You will receive three items from ClassRanked:

1. Single Sign-on URI
   • Format: https://COGNITO_APP_CLIENT_USER_POOL_DOMAIN_NAME /saml2/idpresponse
2. Audience URI
   • Format: urn:amazon:cognito:sp:USER_POOL_ID_FROM_COGNITO
3. [DEPRECATED] Signature Certificate (.crt file)

Setup Steps

Configure SAML Settings

1. Go to “Configure SAML” tab and set the following fields:
   1. Single sign-on URL: Use ClassRanked provided Single Sign-on URI

   2. Audience URI (SP Entity ID): Use ClassRanked provided Audience URI

      

      
      

      Also set the following fields:

      

      
      
   3. Single Logout URL: Use ClassRanked provided Single Sign-on URI
   4. SP issuer: Use ClassRanked provided Audience URI
   5. Other Request-able SSO URLs: https://insights.classranked.com
   6. (OPTIONAL) Enable single logout
   7. [DEPRECATED] Add Signature Certificate (provided by ClassRanked via our AWS console)
2. In Okta's Advanced Settings, add the following Attribute Statements:

Final Step

1. After configuration is complete, locate the SAML 2.0 Metadata URL in Settings and provide this URL to ClassRanked.

Considerations

• Due to security concerns, the ClassRanked SAML application is not configured to support IdP initiated SAML sign in.
  • To prevent users from seeing confusing error pages.
    • Hide the ClassRanked application from the Okta homepage.
    • Create a new bookmark that links to the ClassRanked application: https://insights.classranked.com