Service Provider (SP) Initiated SAML Authentication Flow

SqlDBM offers Service Provider (SP) Initiated SAML Authentication for a variety of Identity Providers (IdPs). The diagram below illustrates the request workflow.

SSO Setup Steps

Step 1 — Contact SqlDBM Support

Before configuring anything in Okta, reach out to SqlDBM to get your Company Identifier. This value is going to be needed in Step 3.2

Open a support ticket with SqlDBM and request SSO setup.

1. Navigate to https://support.sqldbm.com/hc/en-us/requests/new (log in if not already, before continuing)
2. Select Account SSO: Enablement Request from the request type dropdown 
   • 
3. Fill out the following fields:
   1. Subject: Enable SSO
   2. IdP Admin Email: Provide the primary IdP Admin's email address
   3. Description: Requesting Company Identifier to enable SSO
4. Submit the form

💡 Your company identifier is a unique name SqlDBM assigns to your organization. It will appear in your login URL.

Step 2 — Create a New App in Okta

Log in to your Okta Admin Console, then:

1. Add SqlDBM Application in OKTA

   1. In the OKTA admin console, navigate to the “Applications” tab

   2. Click “Create App Integration” and search for "SAML 2.0"

   3. 
      

       

      

Step 3 — Fill in the SAML Settings

1. Add the Application

   1. Provide a meaningful App name

      

       

2. Configure the following

   1. Basic SAML Configuration

      1. Single sign-on URL: https://idp.sqldbm.com/saml/metadata/<company identifier>/Acs

      2. SP Entity ID: https://idp.sqldbm.com

      3. Name ID format: EmailAddress 

      4. Application username: Okta username

         

          

   2. User Attributes & Claims:

       

      

      1. In the Attribute Statements section, configure:

         • Name → http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

         • Expression → user.profile.email 

Step 4 — Send the Metadata URL to SqlDBM

Once your Okta app is saved, Okta will generate a SAML Metadata URL.

• Copy that URL and reply to your SqlDBM support ticket with it.
• SqlDBM will validate your setup, enable SSO, and confirm everything is working.

💡 This tells Okta to send the user's email address to SqlDBM so accounts can be matched correctly.

After SSO Is Enabled

New Users

1. Accept the invite email from SqlDBM.
2. Enter your email address.
3. Verify with the one-time code sent to your inbox.
4. Your account is linked and ready to go.

Existing Users

1. Log in via the SSO button in Okta or by naigating to https://idp.sqldbm.com/sign-in/external/private

2. 

3. On your first SSO login, verify your email with a one-time code.
4. After that, just click and you're in.

5. Log in using SSO by selecting the appropriate IdP from the options provided, or proceed directly to the SQLDBM private SSO sign-in page

Quick Summary

• You open a ticket → get your company ID → configure Okta → send metadata URL back to SqlDBM.
• SqlDBM handles the final activation once they receive your metadata URL.
• Login uses your work email via SAML 2.0 — no extra passwords needed.