Setting up SAML 2.0 Authentication

Okta is used as the Identity Provider (IdP) to set up SAML authentication for Xpress Insight.

Note: The following steps reflect a third-party application and are subject to change without our knowledge. If the steps described here do not match the screens you see in your IdP account, you can use the general SAML configuration steps, along with the IdP’s documentation.

Perform the following steps to complete this task:

1. Enable https on the Xpress Insight Server. Insight must always be configured to use https if you are using SAML authentication. For more, see Enabling HTTPS on Xpress Insight 5.
2. Your IdP must be configured with the Xpress Insight Service details.
3. Xpress Insight must be configured for SAML authentication.
4. One or more users must be identified as Xpress Insight administrators.
5. The Xpress Insight service on the IdP must grant these Xpress Insight administrators the SAML attribute superuser = true. These users will receive all Authority Groups when they log in to Insight, enabling them to configure Xpress Insight.
6. Optionally, configure your IdP to use encrypted assertions.

© 2001-2025 Fair Isaac Corporation. All rights reserved. This documentation is the property of Fair Isaac Corporation (“FICO”). Receipt or possession of this documentation does not convey rights to disclose, reproduce, make derivative works, use, or allow others to use it except solely for internal evaluation purposes to determine whether to purchase a license to the software described in this documentation, or as otherwise set forth in a written software license agreement between you and FICO (or a FICO affiliate). Use of this documentation and the software described in it must conform strictly to the foregoing permitted uses, and no other use is permitted.