Creating a PrecisionLender application within Okta to support Single Sign-On

If you'd like to set up PrecisionLender authentication via Okta, you will first need to create a new Application within Okta.

1. Log into your Okta administration area and create a new application
   
   

2. Choose the Create New App option
   
   

3. Choose the options shown below:
   • Platform = Web
   • Sign on method = SAML 2.0

4. Name your application PrecisionLender or something similar
   
   
5. Click Next
   
   
6. In the SAML settings area (on the General tab), you'll need to enter the following information:

1. 1. ACS/SSO URL : https://sso.connect.pingidentity.com/sso/sp/ACS.saml2
      • Dependent upon your PrecisionLender environment, this may need to be amended. Our team will work with you to determine if any changes are needed.
        
        
   2. Audience URI (SP Entity ID) : PingConnect
      
      
   3. Default RelayState:  This URL varies between PrecisionLender tenants. The PrecisionLender team will provide you with a URL to use for the Default Relay State. 
      
      
   4. Make sure the Application Username is populated by a field that will match the username field within PrecisionLender.  This is usually the user's Okta username or email address.
      1. If the Okta username doesn't equal the format of the PrecisionLender username, you will need to select the appropriate corresponding parameter from the dropdown. For example, if the username in PrecisionLender is an email address, but the Okta username is not, then you'll need to select email address or it's equivalent field from the list.

7. In the yellow SAML 2.0 section of the Sign-On tab, click the link for Identity Provider Metadata and then provide that resulting URL to the PrecisionLender support team.  This information will be used to populate your SAML metadata into our system.