Click Add Application then click Create New App.

Select Web as the Platform and SAML 2.0 as the Sign-on method then click Create.

On the General Settings screen, type a name for Trend Vision One in App name, for example, "Trend Micro XDR" then click Next.

On the Configure SAML screen, specify the following:

1. Type the Trend Vision One logon URL in Single sign on URL.

   The logon URL can be obtained from the xdrSpMetadata.xml file downloaded from Trend Vision One.

   

   Open the xdrSpMetadata.xml in a text editor, and then copy the value of the Location attribute for the md:AssertionConsumerService element. Use the copied value as the logon URL.

2. Select Use this for Recipient URL and Destination URL.

   In the following example, the logon URL is https://example.com/xdr-logon-url.

   

3. Specify the audience URI in Audience URI (SP Entity ID).

   The audience URI can be obtained from the xdrSpMetadata.xml file downloaded from Trend Vision One.

   Open the xdrSpMetadata.xml in a text editor, and then copy the value of the entityID attribute for the md:EntityDescriptor element. Use the copied value as the audience URI.

   In the following example, the audience URI is https://example.com/xdr-audience-uri.

   

4. For Name ID format, select EmailAddress.
5. For Application username, select Okta username.

6. Click Next.

   

For Are you a customer or partner, select I'm an Okta customer adding an internal app then click Finish.

In the Settings table, under Sign on Methods, download and save the file for the Identity Provider metadata then Import this metadata file to Trend Vision One.

Assign the application to groups and add people to groups.

1. Select Directory > Groups.

2. Click the groups that you want to assign the application to, and then click Manage Apps.

   The Assign Applications screen appears.

3. Locate Trend Vision One you added and click Assign.
4. Click Manage People. The Add People to Groups screen appears.
5. Locate the user you want to allow access to Trend Vision One and add the user to the Trend Vision One group.

6. Confirm that the application is assigned to the user and group.

   After assigning an application to a group, the system automatically assigns the application to all users in the group.

7. Repeat the above steps to assign the application to more groups as necessary.

Create the corresponding SAML account in Trend Vision One (the user assigned in the previous step).