To enable single sign-on (SSO) with SAML for Cisco+ Secure Connect, you must first add the Okta app for Umbrella to your organization, then follow a step-by-step wizard to complete the process in Umbrella.

1. Navigate to Admin > Authentication.
2. In the SAML Dashboard User Configuration section, click Enable SAML.

3. Select Okta and click Next.

4. From the Instructions tab, follow instructions as listed. You'll be asked to provide the provider metadata.
5. To configure Okta for Umbrella to gather the metadata, log into your Okta dashboard as the user you want to configure for Umbrella and go to the Admin tab. It's best if you start by logging into the Okta dashboard with the same account you are using in the Umbrella dashboard.
6. In the Okta dashboard, click Applications and then click Add Application.
7. Search for “Cisco Umbrella” and click Add to add the application named "Cisco Umbrella".
8. Assign an easily identifiable label for the Application, keep defaults as is for General Settings, and then click Next.
9. Under Sign-On Methods, select SAML 2.0. You can disable force authentication here.
10. Click the hyperlink for Identity Provider metadata and save the downloaded metadata file. You will need this in step 3 of the Umbrella setup wizard.

11. Return to the Sign-On Options and from the Application Username Format drop-down list, choose Email and then click Next.

12. Assign the application to one or more users. All accounts that need to access the dashboard now or in the future should be selected here and have the application assigned to them or they will not be able to log in.
13. In the final Okta step, ensure the proper user attributes have been enabled for each account, specifically the username (email). The email must match exactly the email that's used to log into Umbrella.
14. In Umbrella navigate to Settings > Authentication and proceed to step 3 of the wizard – Upload Metadata.

15. Click Choose File, select the metadata file you downloaded from Okta and click then Next.
16. Click Test Your SAML Configuration and enter the Umbrella email for your current logged in user that was added to the Okta application. After the test completes, a success message should be displayed. All authentication to the Umbrella dashboard for all users in your organization is now handled by Okta.