Setting up Okta with GoToMyPC for additional authentication - GoToMyPC Support

Setting up Okta with GoToMyPC for additional authentication

By using Okta's Single Sign-On (SSO) solution, users can securely log in to GoToMyPC from other applications with their corporate e-mails.

Before you begin:

Prerequisites:

An Okta subscription
An active GoToMyPC Corporate subscription

Configure your Okta Active Directory Account

Log in to your Okta account.
Navigate to the Applications tab.
Click Create App Integration, select SAML 2.0, then click Next.
Enter an app name, for example "OKTA_GoToMyPC", then click Next.
Configure the SAML settings with the following details, then click Next:
- Single sign-on URL: https://prod.sso.gotomypc.com/SSOService/saml
- Audience URI (SP Entity ID): GoToMyPCOKTA
- Name ID format: EmailAddress
- Application username: Email
- Attribute statements
  - Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
  - Value: user.email
  - Name format: Basic
Finalize the setup process by answering the remaining questions on creating the app integration, then click Finish.
Click on View SAML Setup Instructions. Copy and save the following, as you will need them for setting up Okta with GoToMyPC:
- Identity Provider Single Sign-On URL
- Identity Provider Issuer
- X.509 Certificate – Download and save it as a .CER file
Configure the logout URL with the following details by navigating to SAML settings, and click Show Advanced Settings
- Response: Unsigned
- Assertion Signature: Unsigned
- Signature certificate: Upload the certificate you downloaded in step 7.
- LogOut URL: https://prod.sso.gotomypc.com/SSOService/samllogout
Assign users to the application you created in Okta (OKTA_GoToMyPC) by navigating to Assignments, and adding the users.

Note: The users you add need to have an active GoToMyPC account.

Setting up Okta in GoToMyPC

Log in to your GoToMyPC Manager account and navigate to the SSO (Single Sign-On) Configuration page.
Select Okta from the dropdown menu at IDP and configure the SSO settings with the following details:
- Tenant ID – the 20-character-long ID from the Identity Provider Issuer that is after the "/" character .
- SSO URL – that is the first part of Identity Provider Single Sign-On URL, ending with "app", without the "/" character.
- Entity ID – that is the middle part of the Identity Provider Single Sign-On URL, following "app/", until the next "/" character.
Click Save changes, then wait for the SSO is successfully enabled! message.
Log out, and then log in again from the GoToMyPC SSO login page.

Article last updated: 4 December, 2023

You are viewing the latest version of this article.