...

1. Log in to your Abiquo and Go to the Users tab.

2. Create a new enterprise with the desired scope,i.e. ExternalEnterprise with Global Scope:
   

3. 

   After the new enterprise is created go to the Roles tab and create a new role inside this enterprise, give it a name, and fill in External Roles with the name the users in Okta will have as their Title, i.e.: External_role:
   

   

   Note: The role Name is Abiquo side only, so it does not matter that much. The external role is the value that will be checked against what comes from Okta in the abq-role attribute claim.

4. Save the new role, assign desired privileges to the role, and save the changes.

Set up Okta integration

1. Create an Application

1. Log in to Okta with Google account or email at: https://developer.okta.com/login or create a new account at: https://developer.okta.com/signup/ (Free developer edition)

...

2. Go to Applications→ Applications

3. Click Create App integration

4. Choose SAML 2.0 from the list and Next

5. Choose the Name, i.e Abiquo-test, Next

6. Set Single sign-on URL: https://{$ENV_FQDN}:443/api/saml/SSO
   i.e.: https://aleksandra-cleandistr-server.lab.abiquo.com:443/api/saml/SSO

7. Set Audience URI (SP Entity ID): https://{$ENV_FQDN}:443/api/saml/metadata
   i.e.: https://aleksandra-cleandistr-server.lab.abiquo.com:443/api/saml/metadata

8. In the Attribute Statements (optional) section add the following: 

...

9. Select any option for feedback and click Finish

10. In Settings→ Sign on methods, SAML 2.0 section of your application open the metadata link in the new tab, and save the page as idp_metadata.xml, do not close the tab yet
    

    

11. From the metadata page, note down the entityID value, i.e.: http://www.okta.com/exkezXXXXXXXX45d7 we will use it later to configure Abiquo.

    

    Now you can close the tab.

...