Single Sign-on (SSO) Authentication with Okta

In this article, you'll learn how to set up Single Sign-On (SSO) authentication with Okta. The SSO can be implemented for both Web and Admin Portals.

Keep in mind that when you activate an SSO authentication, the following OfficeRnD Hybrid authentication services are disabled:
  • The standard login with an OfficeRnD Hybrid user and password
  • The "Reset password" links in OfficeRnD Hybrid
  • The token for authentication which employees receive when invited to the Members Portal. 

 

Enable SSO with Okta

1. Open https://developer.okta.com

2. Go to Applications and Create App Integration.

3. Choose OIDC - OpenID Connect. Please note that we do not support other protocols.

4. Select Web Application and click Next.mceclip0.png

6. Give your Okta app an appropriate name.

7. Open Hybrid and navigate to Settings/Integrations.

3. Look for SSO Authentication and click Activate.

sso auth 1.png

4. Next, click Configure.

config.png

5. Copy the Return URL and paste it into the Sign-in redirect URIs field in Okta. Sign-out redirect URIs is optional but, in case you need to fill that in, please use the same URL and replace /return with /log-out.

6. In Okta, enter the following in the Base URL: https://hybrid.officernd.com

7. Select the Controlled access option from the tab called Assignment.

8. Save the Application.

9. Copy the Client ID and Secret from Okta and paste them into the respective fields in Hybrid.

id and secret.png

10. Finally, enter the Discovery URL in OfficeRnD using your Okta Domain. The URL should follow this syntax:

https://okta domain value/oauth2/default/.well-known/openid-configuration.

E.g.: https://dev-8934962.okta.com/oauth2/default/.well-known/openid-configuration

Note: The Discovery URL might not be resolved with this syntax. That depends on Okta entirely. If you receive a Failed to resolve discoveryUrl message, use the following syntax:

https://okta domain value/.well-known/openid-configuration
More info on Okta's Discovery URL formatting can be found here.

11. (optional) Enable Account Activation in OfficeRnD. With this setting enabled, employees that already exist in OfficeRnD Hybrid will be allowed to log into the Portal without needing to be explicitly invited. If this setting is disabled, employees without prior access to the Portal will need to have it Enabled by an administrator.

12. Hit the Update button.

Admin Portal SSO

After you have configured the Web Portal SSO, you can add your Admin Portal SSO as well.

1. Click Configure on the SSO integration in Hybrid.

2. Click Activate Admin Portal SSO:

activate sso.png

3. Copy the Return URL.

4. Open your application in Okta.

5. Edit the General Settings.

6. Under the LOGIN section and Sign-in redirect URIs, click Add URI.

7. Paste the copied Return URL.

8. Save your changes in both platforms.

osso.gif

Was this article helpful?
1 out of 1 found this helpful
Was this article helpful?

Comments

0 comments

Please sign in to leave a comment.