Okta EFM integration using SAML

For integrating Edge Flow Manager (EFM) with Okta, Cloudera recommends using the Okta Application Integration Wizard to add EFM as a custom application using SAML 2.0.

For up-to-date instructions about how to add EFM as a custom application using SAML, see Create SAML app integrations using AIW.

You need to enter few pieces of information about EFM, asked by Okta. The following table specifies the values to provide:
Property Value
App Integration Name Cloudera Edge Flow Manager (or whichever name you prefer)
Single sign on URL https://localhost:10090/efm/login/saml2/sso/efm-saml
Audience URI (SP Entity ID) https://localhost:10090/efm/saml2/service-provider-metadata/efm-saml
Attribute Statements (optional)

EFM contains an optional property in the efm.properties file called efm.security.user.saml.displayNameAttribute. This controls what name gets set in EFM the first time a user logs in using SAML SSO. In order to use this, set an attribute in SAML settings in Okta to hold the user’s display name and then update EFM to set the displayNameAttribute to the same attribute key/name. For example:

In Okta:

Name: first_name

Value: user.firstName

In the efm.properties file:

efm.security.user.saml.displayNameAttribute=first_name

After completion, configure EFM by following the instructions in Configuration of SAML 2.0 SSO.