Setting up Okta with GoToMyPC for additional authentication - GoToMyPC Support

Setting up Okta with GoToMyPC for additional authentication

By using Okta's Single Sign-On (SSO) solution, users can securely sign in to GoToMyPC from other applications with their corporate emails.

Before you begin:

Prerequisites:

An Okta subscription
An active GoToMyPC Corporate subscription

Configure your Okta Active Directory Account

Sign in to your Okta account.
Navigate to the Applications tab.
Select Create App Integration > SAML 2.0 > Next.
Enter an app name, for example, "OKTA_GoToMyPC" then select Next.
Configure the SAML settings with the following details, then select Next:
- Single sign-on URL: https://prod.sso.gotomypc.com/SSOService/saml
- Audience URI (SP Entity ID): GoToMyPCOKTA
- Name ID format: EmailAddress
- Application username: Email
- Attribute statements
  - Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
  - Value: user.email
  - Name format: Basic
Finalize the setup process by answering the remaining questions on creating the app integration, then select Finish.
Select View SAML Setup Instructions. Copy and save the following, as you will need them for setting up Okta with GoToMyPC:
- Identity Provider Single Sign-On URL
- Identity Provider Issuer
- X.509 Certificate – Download and save it as a .CER file
Configure the logout URL with the following details by navigating to SAML settings and select Show Advanced Settings.
- Response: Unsigned
- Assertion Signature: Unsigned
- Signature certificate: Upload the certificate you downloaded in step 7.
- LogOut URL: https://prod.sso.gotomypc.com/SSOService/samllogout
Assign users to the application you created in Okta (OKTA_GoToMyPC) by navigating to Assignments and adding the users.

Note: The users you add need to have an active GoToMyPC account.

Setting up Okta in GoToMyPC

Sign in to your GoToMyPC Manager account and navigate to the SSO (Single Sign-On) Configuration page.
Select Okta from the dropdown menu at IDP and configure the SSO settings with the following details:
- Tenant ID – the 20-character-long ID from the Identity Provider Issuer that is after the "/" character.
- SSO URL – that is the first part of the Identity Provider Single Sign-On URL, ending with "app" without the "/" character.
- Entity ID – that is the middle part of the Identity Provider Single Sign-On URL, following "app/" until the next "/" character.
Select Save changes, then wait for the SSO is successfully enabled! message.
Sign out, and then Sign in again from the GoToMyPC SSO login page.

Article last updated: 14 February, 2025