Okta configuration as IdP for OpenID

Okta is an Identity Provider (IdP) used by Service providers. The setup and configuration are pretty straightforward and easy. Accounts should be created first with the Okta. Only the account owner or an administrator in a Document360 project can access and get the SSO setup configured.

Okta Signup

1. Sign up for the Okta at https://developer.okta.com/signup/ the Okta developer console/

2. Post sign-up you would receive a mail with your login credential and account activation link on the Email provided during sign-up
3. Click on the activation link and you will be redirected to your Okta Domain login page
4. Log in with your credentials
5. The dashboard would be displayed on the Okta developer console domain after successful login.

Adding an application

To configure an application to Okta, the user must create a new application.

1. The default dashboard would be as a ‘Developer console’. It has to be changed to ‘Classic UI’
2. On the top left corner of the page, you’d find a drop-down to toggle between the dashboards
   
    
3. To create a new application, go to the Applications menu and click on Applications in the drop-down.
4. Now click on the Add application button on the window
5. On the Add Application page click on the Create New App button
   
   
6. In the overlay Create a New Application Integration window select the platform as Web from the drop-down
7. Now in the Sign on method select OpenID Connect and click on the Create button
   
   

Application settings

2. In the Name field, type in a name to identify your application
3. Next, the Base URI field adds in the designated URI of your application; however, this is optional
4. Now go to your Document360's SSO page
   
   

5. Copy the Login redirect URI and the Logout redirect URI from the application’s SSO integration page
6. Paste the copied URIs to the respective fields on the Okta Application settings page
7. Usually, the Service provider hosts a route that Okta (IdP) passes information when a user Logs in. This is referred to as the Callback route or Redirect URI 
8. Group assignment is a collective and easier way of assigning who can access what application. This field is also optional
9. Once all the required fields are provided click on the Done button