This guide explains how to configure SAML-based Single Sign-On (SSO) between Okta and Tallyfy to enable automated user authentication and provisioning.
Requirements
Okta administrator account
Tallyfy Professional or Enterprise plan
SAML configuration values from Tallyfy Support
Implementation process overview
The integration involves three main phases:
Creating and configuring an Okta SAML application
Configuring SAML settings in both systems
Enabling and testing the SSO integration
Phase 1: Create Okta SAML application
Step 1: Access application management
Sign in to the Okta Admin Console
Switch to Classic UI from the dropdown in the top left header
Navigate to Applications > Applications
Click Add Application
Select Create New App
In the modal dialog, select Web for Platform.
Select SAML 2.0 for Sign-on method.
Click Create.
Step 2: Configure general settings
Enter “Tallyfy” as the application name
Optionally upload the Tallyfy logo
Click Next
Phase 2: Configure SAML settings
Step 1: Obtain Tallyfy SAML values
To properly configure Okta, you need Tallyfy’s default SAML values:
Contact Tallyfy Support to access your organization’s profile
Navigate to the Org Settings tab
Click on Add Configuration Details
Locate the default SAML values section
Step 2: Enter SAML settings in Okta
Configure the SAML settings in Okta using the values from Tallyfy:
Single Sign On URL: Enter the value from Tallyfy’s “SP ACS URL” field
Keep Use this for Recipient URL and Destination URL checkbox selected
Audience URI (SP Entity ID): Enter the value from Tallyfy’s “SP Entity ID” field
Click Show Advanced Settings
Change Authentication context class to X.509 Certificate
Step 3: Configure attribute statements
Add the attribute statements as detailed below:
Name
Name Format
Value
email
Unspecified
user.email
FirstName
Unspecified
user.firstName
LastName
Unspecified
user.lastName
After adding the attributes, click Next.
Step 4: Complete Okta configuration
Select I’m an Okta customer adding an internal app
Check This is an internal app that we have created
Click Finish
Phase 3: Configure Tallyfy with Okta information
Step 1: Obtain Okta SAML information
Navigate to the Sign On tab in your Okta application
Scroll down and click View Setup Instructions
The page will display the SAML configuration details for the identity provider
Step 2: Provide information to Tallyfy Support
Send the Identity Provider Single Sign-On URL to Tallyfy Support.
Send the Identity Provider Issuer to Tallyfy Support.
Send the X.509 Certificate to Tallyfy Support.
Tallyfy Support will configure these values in your organization’s SAML settings.
Step 3: Enable SAML authentication
Once Tallyfy Support has configured your SAML settings:
Toggle the SAML activation switch to enable SSO for your organization
User provisioning and access
After completing the integration:
Obtain the Tallyfy login URL from the SAML configuration modal (provided by Tallyfy Support)
Share this URL with your users who have access to the Okta application
Users can now access Tallyfy through this URL:
Existing Tallyfy users will be automatically authenticated
New users will be provisioned in Tallyfy upon their first login
Troubleshooting
If users encounter authentication issues:
Verify the user has been assigned to the Okta application
Check that attribute mappings are correctly configured (exact names and formats)
Ensure users are accessing Tallyfy through the SSO URL
Contact Tallyfy Support for assistance with persistent issues
A comprehensive walkthrough for setting up SAML Single Sign-On between OneLogin and Tallyfy by creating an application connector configuring SAML settings enabling user provisioning and testing the authentication flow.
The comprehensive guide outlines the complete process for setting up SAML-based Single Sign-On between Microsoft Azure Active Directory and Tallyfy including application configuration attribute mapping and user provisioning steps for seamless authentication.
The comprehensive guide outlines the process of implementing SAML-based Single Sign-On between Google Workspace and Tallyfy through application setup attribute mapping and user access configuration for automated authentication.
Free Single Sign-On integration enables team members to access Tallyfy using their existing company credentials while providing enhanced security automated account setup and centralized user management through popular identity providers.
