You must create a custom application in Okta in order to use Single Sign-On (SSO) for Mixpanel through Okta. Before using this document, read the general Mixpanel SSO set-up instructions as well as Okta’s documentation on setting up a new application.
This is a new version of SSO and is in BETA.
Email email@example.com for more information.
Configure SSO in Mixpanel
Make sure to collect your postback URL and successfully claim your domain.
Create the Mixpanel App in Okta
Follow Okta’s documentation on setting up a new application to create the Mixpanel App.
You must fill the form found in the “Configure SAML” menu in Okta. The following highlights what you should place in the fields.
Make sure that the following is adjusted to match the following:
- Requestable SSO URLs: https://sso.mixpanel.com/sso/saml2
- Recipient URL: https://sso.mixpanel.com/sso/saml2
- Destination URL: https://sso.mixpanel.com/sso/saml2
- Audience URI: https://mixpanel.com/security/sso/v2/authorize/
Additionally, it is required that you use email as an attribute statement.
Obtain Information From Okta
You must first obtain your Public Certificate, Authentication URL, and Issuer URL in order to configure Mixpanel use with Okta.
To access this information, first select the select the Mixpanel app under the "Applications" tab in Okta. Click on the Sign On tab.
Under the "SAML 2.0" section, click View Setup Instructions and scroll down to "Configuration Data".
Your X.509 certificate is what allows users signing in through a third-party identity provider to be authenticated by Mixpanel without supplying a username and password. Each identity provider account has a unique X.509 certificate that will need to be uploaded to Mixpanel during the single sign-on setup process.
Click Download Certificate in the second entry to download your certificate.
Your Authentication URL is in the third entry labeled “Redirect Login URL”.
You will find your Issuer URL in the third entry labeled “Identity Provider Issuer”.
From Mixpanel, navigate to your Organization Settings. From the SSO menu, insert your Public Certificate, Authentication URL, and Issuer URL.
Optionally toggle “Require Users to Log In using SSO” to prevent your users from using a username and password to log in. Click Enable. Organization owners and admins will still be able to log in using username and password if SSO is not set up correctly.