This guide walks you through using Okta as an identity provider when signing into the ngrok dashboard. This should not be confused with configuring an ngrok endpoint so application users can log in using Okta.

​
What you’ll need

  • Admin access to create new applications in Okta
  • Admin access to edit your ngrok account settings
  • An ngrok Enterprise account

​
1. Create a new SAML App Integration in Okta

  1. From the “Applications” menu, click the blue “Create App Integration” button.
  2. Select “SAML 2.0” and click “Next”
  3. Give your app a name, and click “Next”
  4. Enter in temporary values for “Single sign on URL” and “Audience URI” and select “EmailAddress” for “Name ID format” and then click “Next”. ngrok requires the username to be in email format.
  5. Select “This is an internal app that we have created” and click “Finish”.

​
2. Download your SAML App metadata XML

  1. Navigate to the “Sign On” Tab on the new app and click on “Actions” under the Active SHA-2 certificate
  2. Click “View IdP metadata”.
  3. In that new window, Select “Save As” from the File menu to save your metadata.xml file for uploading into ngrok in a later step.\

​
3. Configure Single Sign-On (SSO) for your ngrok account

  1. Log into your ngrok dashboard and navigate to the “Settings > Account” section in the left navigation menu.
  2. Select ”+ New Identity Provider” button to add a new identity provider.
  3. Add a helpful description, and then upload the metadata.xml file from Okta into the ngrok dashboard.
  4. In the Options section, select whether you’d like to allow users to log into the dashboard directly from their Okta dashboard
  5. Click “Save”. Clicking Save will create the integration and generate the required URLs for your Okta Application.

​
4. Add the ngrok generated URLs to your Okta SAML application

  1. Back in your Okta account, on the “General” tab of your Okta app, click on “Edit” under “SAML Settings”
  2. Click ‘Next’ on the ‘General Settings’ tab to get to the ‘Configure SAML’ tab.
  3. Replace the values ngrok provided you. Put the ngrok ‘ACS URL’ value into Okta’s “Single sign on URL” field. Put the ngrok ‘SP Entity ID’ value into Okta’s “Audience URI (SP Entity ID)” field.
  4. Click “Next”. Click “Finish”.
You should now be configured to log into your ngrok account using Okta. By default, your ngrok account will still allow users to log in with their existing credentials as well as through Okta (“Mixed Mode”). Once you verify that everything is working properly with your integration, you can enable “SSO Enforced” in the ngrok Dashboard which will require all new users to log in through Okta for their ngrok account.