Create OKTA App

1. Log in to Okta, go to the Admin->Applications page, click the Add Application Button, and then click the Create New App Button.
2. In the Create a New Application Integration dialog, leave Web selected for Platform and change Sign on method to SAML 2.0. Click Create.
3. Enter ChurnZero for the App Name and click Next.
4. Enter these values for the following fields:
   1. Single sign on URL: https://app.churnzero.net/samlLogin
   2. Audience URI (SP Entity ID): https://app.churnzero.net
   3. Application username: Email
5. Click Next, select I'm an Okta customer adding an internal app, and then click Finish.
6. Inside the box with the yellow column, click View Setup Instructions which will open a new tab containing the Identity Provider Issuer and X.509 Certificate that you’ll need to copy into ChurnZero. Leave this tab open.
7. Go back to the original Okta tab and click Assignments. Assign the application to people and groups as necessary, making sure your account is either assigned directly or in a group that is assigned.

Configure ChurnZero

1. Log in to ChurnZero and manually go to /#/app/admin/samlSetup.
2. Click Add Configuration, copy both the Identity Provider Issuer and X.509 Certificate from the Okta Setup Instructions page into the dialog form, and click Save.
3. Append ,SAML to the Login-AllowedLoginSources TenantConfigItem record if it exists and is not blank.
4. Log out of ChurnZero, go back to Okta->My Applications, and click the ChurnZero application.
5. If everything was setup correctly and the email address of your Okta account matches a user account in ChurnZero, you’ll automatically be logged in to ChurnZero. If MFA is turned on you’ll still need to enter the authenticator code.