In this article, you'll learn how to set up Single Sign-On (SSO) authentication with Okta. The SSO can be implemented for both Web and Admin Portals.

Enable SSO with Okta

1. Open https://developer.okta.com
2. Go to Applications and Create App Integration.
3. Choose OIDC - OpenID Connect. Please note we do not support other protocols.
4. Then select Web Application.
   
5. Click Next.
6. Give your Okta app a meaningful name.
7. Open your OfficeRnD Hybrid and navigate to Settings/Integrations.
8. Expand Authentication and activate SSO Authentication.
9. Click Configure.
10. In Okta, enter the following in the Base URL: https://hybrid.officernd.com
11. Copy the Return URL from OfficeRnD and paste it into Sign-in redirect URIs. Sign-out redirect URIs is optional but in case you need to fill that in, please use the same URL and replace /return with /log-out.
12. In Okta, select a Controlled access option from the last tab called Assignment.
13. Save the Application.
14. Copy the Client ID and Secret from Okta and paste them into the respective fields in OfficeRnD.
15. Finally, enter the Discovery URL in OfficeRnD using your Okta Domain. The URL should follow this syntax: {{okta domain value}}/oauth2/default/.well-known/openid-configuration. E.g.: https://dev-8934962.okta.com/oauth2/default/.well-known/openid-configuration
    The Discovery URL might not be resolved with this syntax. That depends on Okta entirely. If you receive a Failed to resolve discoveryUrl message, use the following syntax:
    https://dev-8934962.okta.com/.well-known/openid-configuration
    More info on Okta's Discovery URL formatting can be found here.
16. Enable Account Activation in OfficeRnD - optional - With this setting enabled - employees that already exist in OfficeRnD Hybrid will be allowed to log into the Portal without needing to be explicitly invited. If this setting is disabled - employees without prior access to the Portal will need to have it Enabled by an administrator.

    

17. Hit the Update button.

Admin Portal SSO

After you have configured the Web Portal SSO, you can add your Admin Portal SSO as well.

1. Click Configure on the SSO integration in OfficeRnD.
2. Click Activate Admin Portal SSO.
3. Copy the Return URL.
4. Open your application in Okta.
5. Edit the General Settings.
6. Under the LOGIN section and Sign-in redirect URIs, click Add URI.
7. Paste the copied Return URL.
8. Save your changes in both platforms.