It’s pretty common for companies using a SAML app like Okta to have users expect to access the company’s apps from the SAML app interface (as opposed to navigating to the app’s url directly), but at the time of this writing our auth provider doesn’t support IDP-initiated logins so clicking on the actual Omni Analytics app to in Okta will result in a login error message.
Okta Workaround
Assuming you’ve already completed the actual app integration from Okta to Omni, you’ll want to go back and check the box to not display the official app to users (clicking on this will result in a log in error)
Now that the official app that actually handles the authentication is hidden, you’ll want to create a “Bookmark App” (okta docs) with a link to your Omni base url (e.g acme.omniapp.co). When clicked on, if the user has an active session it will just load the home page of your omni instance but if not they will see the login page and click “Login with SAML”
Once you’ve created the bookmark app it will have a placeholder image but you can find it in your applications and add the Omni logo. Afterwards it will look like this.
Other SAML Apps
It’s likely that other SAML apps have a similar workflow, will add to comments here for specifics on those as we come across the examples