Question:
How to configure Control Hub Cloud SAML ?
Answer:
Configuring SAML in the Control Hub is actually done by users with Organization Administration role (not by StreamSets) as they can access SAML configuration in the Control Hub. After configuring the application on the Okta side, Okta provides you metadata (Image 1) which you need to save to an XML file and upload it to the Control Hub --> Administration --> Organizations --> Configuration --> SAML IdP Metadata (Image 2).
Image 1: Okta SAML Configuration Screen
Image 2: Control Hub SAML Configuration Screen
After uploading the metadata file to Control Hub, it also uploads some configuration on the SAML IdP Options tab. If necessary (after reviewing by your SAML administrator), the users can change some additional configuration there (e.g. "Wants SAML Assertions Encrypted", "Wants SAML Messages Signed", and "Wants Assertions Signed").
Please note that this is how it generally works with Okta. Other Identity Providers may not generate a metadata file and may require the users to manually configure everything in SAML IdP Options.
