Skip to main content
Enterprise Plan Feature: SAML Single Sign-On is available exclusively for workspaces on the Enterprise plan.

​
Step 1: Create SAML Integration in Okta

In your Okta Dashboard, navigate to the Applications section in the sidebar and click on Create App Integration.
Create App Integration
For the sign-on method, select SAML 2.0 and click Next.
Select SAML 2.0
On the General Settings page, enter Biqli for the app name, then click Next to continue to the SAML settings.
General Settings - App Name

​
Step 2: Configure SAML Settings

Copy the following values and paste them into the SAML Settings > General section:
Single sign-on URL
https://biq.li/saml/acs
Audience URI (SP Entity ID)
https://biq.li/workspaces/{WORKSPACE_SLUG}
Please ensure you replace {WORKSPACE_SLUG} with the slug of the specific workspace in which you are activating Okta SAML.
Set the Name ID format to EmailAddress and the Application username to Email.
SAML Settings configuration

​
Step 3: Configure Attribute Statements

Just below the General section in the SAML Settings, navigate to the Attribute Statements section. Add the following four attribute statements:
NameName formatValue
emailUnspecifieduser.email
firstNameUnspecifieduser.firstName
lastNameUnspecifieduser.lastName
displayNameUnspecifieduser.displayName
Configure Attribute Statements

​
Step 4: Submit Feedback

You will then be presented with an Okta Feedback section. Select the option “This is an internal app we have created” and click Finish to complete the application creation process.
Submit Okta Feedback

​
Step 5: Copy the Metadata URL

After finishing the setup, you will be taken to the Sign On tab for your new application. Under the settings section, locate and copy the Metadata URL. You will need this to complete the configuration on Biqli.
Copy Metadata URL

​
Step 6: Configure SAML SSO on Biqli

Navigate to your Biqli workspace Security Settings. Under the SAML Single Sign-On section, click Configure SAML Single Sign-On.
Biqli Security Settings
In the configuration modal:
  1. Select Identity Provider: Choose Okta as your SAML provider.
  2. Metadata URL: Paste the Metadata URL you copied in Step 5.
  3. Test Connection: Click to verify your setup.
  4. Enable SAML: Toggle on SAML authentication for your workspace.
  5. Save Changes: Click Save changes to complete the configuration.
Biqli SAML Configuration Modal

​
Step 7: Assign Users

To assign users, navigate back to your Okta dashboard and open your Biqli application. Under the Assignments tab, click Assign (you can assign users individually or in bulk by group).
Okta Assignments Tab
Select the users or groups you want to assign and click Assign.
Okta User Assignment
On the next screen, scroll to the bottom and click Save and Go Back.
Save Okta Assignments
The users you assigned will now be able to sign in to Biqli using Okta SSO.

​
Technical Notes

Just-In-Time (JIT) Provisioning: When users sign in for the first time, their Biqli account will be automatically created and assigned to your workspace.
We highly recommend configuring SCIM Directory Sync before assigning users & groups to your workspace. This ensures users are automatically added when assigned, and immediately deactivated in Biqli when disabled in Okta.