Setting Up OKTA SSO

SSO is available only on RocketReach Enterprise plans. If you are interested in enterprise pricing, you can contact us here.

This article is intended for administrators setting up SSO for their teams on RocketReach.

Okta Setup

1. Open a new browser tab or window (preferably in incognito mode), and sign in to your Okta administrator console.
2. Select Applications option from the list.                                 
3. On the Applications page, click the Create App Integration button.
4. Choose SAML 2.0 and click Next.
5. In Step 1, General Settings, give the application whatever name you want, add Logo (optional), and click Next.
6. On Step 2, SAML Settings, enter these details:
   1. Single sign on URL and Audience URI:

      https://rocketreach.co/saml2_auth/acs/

   2. Name ID Format: EmailAddress
   3. Application Username: Email
7. Click Show Advanced Settings in SAML Settings and set the following:
   1. SAML Issuer Id to https://www.okta.com/${org.externalKey} 
8. In the Attribute Statements, add the following attributes: 

   Name	Name Format	Value
   first_name	Unspecified	user.firstName
   last_name	Unspecified	user.lastName
   email	Unspecified	user.email

   
9. Click Next to go to step 3.
10. Choose I’m an OKTA customer and then click Finish to create the app.
    
11. Open the Assignments tab.
12. Click Assign > Assign to People and click the Assign button beside each user you want to approve for single sign-on access to RocketReach.
13. ​​Click Done. Make sure users’ email addresses appear in the User Name field.
14. Select Assignments and assign desired users to the RocketReach app to allow them to log in to RocketReach using SSO.
15. Select the Sign On tab. In the SAML Signing Certificates you’ll find the link to the Okta setup page containing the data needed in the following steps.                                                              

RocketReach Setup

1. Open a new browser tab or window (preferably in incognito mode), and sign in to RocketReach as your Enterprise team administrator.
2. Go to My Account page, then select Security:                                
3. Click the Setup SAML Connection button and select Okta in the list on the left side:
4. Submit your signin URL and x509 certificate, following the steps in this article.
5. Click Test SAML Connection.
6. Once the connection is tested successfully click Save Configuration button.
7. Enable the Single Sign On function.
8. Log out and test SSO login following the steps below.

Logging In

If you've configured and enabled SSO on RocketReach, your users' sign-in flow will follow the sequence below:

1. Users navigate to a RocketReach Login with SSO page.
2. Once users enter their email, they are redirected to your corporate server or third-party identity provider login page, depending on the enterprise SSO IdP you connected.
3. The IdP requests the user’s username and password. They enter their sign-in credentials. The client passes the SAML response to RocketReach.
4. If valid, users are redirected back into RocketReach.

Note: Users can also start the sign-on process from your corporate server or your third-party identity provider’s sign-in page. They will then be authenticated automatically when accessing RocketReach.