Configure Workday
After the Workday SSO is configured in Okta, a few values need to be modified to make it work with SAML proxy.
Click on the plus (+) icon underneath SAML Identity Providers to add a row, then enter the following: It is recommended to use Authentication Selector to easily manage various authentication modes. This seems to be some of the common pattern found in various customer deployments.
The newly created Authentication selector can be used in creating Redirection URLs section.
Provide SAML configuration with the required fields as shown:
Identity Provider Name: Enter Okta.
Issuer: Enter the Organization ID from the Netskope UI.
x509 Certificate: Do the following:
Click the icon in the x509 Certificate field.
Click Create x509 Public Key in the dialog box.
In the Create x509 Public Key screen, enter a unique name for your certificate.
Copy and paste the SAML proxy certificate into the Certificate field.
Click OK to save your certificate and return to the Edit Tenant Setup - Security screen
Save your changes.