Account

Configure Cincopa SAML SSO with Okta

Use Okta as the SAML 2.0 identity provider for your Cincopa account. An administrator configures the connection and assigns the users who should have access.

Get the Cincopa service-provider values

Open Account Settings → SSO as a Cincopa administrator. Confirm that SAML SSO is available for the account and copy its Entity ID and ACS / Reply URL. Use the exact values shown for this account, including any connection parameter.

The Account Settings guide explains the Cincopa SSO fields. If those settings are unavailable, contact your account administrator or Cincopa support before configuring Okta.

Create the Okta SAML integration

  • In the Okta Admin Console, open Applications and create an app integration using SAML 2.0.
  • Give it a recognizable name, such as Cincopa.
  • Set Single sign-on URL to Cincopa's ACS / Reply URL.
  • Set Audience URI (SP Entity ID) to Cincopa's Entity ID.
  • Configure the application username and Name ID to identify the intended Cincopa user. Confirm the expected email or identifier mapping for your connection.
  • Save the integration and obtain its identity-provider metadata.

Okta's SAML field reference explains these fields. Follow any additional claim or signing requirements supplied for your Cincopa connection.

Complete the connection in Cincopa

In Cincopa's SSO settings, import the Okta IdP metadata, or enter the IdP values and certificate where your setup requires them. Save the configuration. Assign a test user or group to the Okta application and test sign-in before rolling it out more widely.

This SAML setup uses the identity provider to authenticate the user. It does not require saving a separate Cincopa password in an Okta password-vault app.

Sign in and troubleshoot

Use the organization's Okta URL and select the assigned Cincopa application. If the tile is missing, ask the Okta administrator to check assignment. If the assertion is rejected, compare the ACS URL, Entity ID, certificate, and user identifier on both sides.

Authentication and the user's Cincopa permissions are separate. Review Cincopa SSO and account membership when a user signs in but cannot access the expected content.