How to purchase and configure Okta SSO?
The system supports Okta as an SSO provider using OpenID Connect (OIDC).
To configure Okta SSO, you need an appropriate Okta Workforce Identity subscription and an OIDC application integration.
Prerequisites
Before configuring Okta SSO, ensure that you have:
- An Okta account.
- An appropriate Okta Workforce Identity subscription.
- Administrator access to the Okta Admin Console.
- Permission to create an application integration.
- Access to the system's SSO configuration screen.
Okta SSO is available through Okta Workforce Identity.
- Open the Okta pricing page.
- Review the available Workforce Identity plans.
- Select the plan suitable for your organization.
- Complete the subscription/purchase process.
Note: Pricing and plan availability may vary depending on the region, number of users, and selected plan.
After obtaining the Okta service:
- Sign in to the Okta Admin Console.
- Go to Applications → Applications.
- Click Create App Integration.
- Select OpenID Connect (OIDC) as the sign-in method.
- Select Web Application as the application type.
- Click Next.
Okta – Create an OIDC App Integration
Step 3: Configure the ApplicationEnter the required application information.
Configure the Sign-in Redirect URI using the Callback URL provided by the system.
Make sure that the Callback URL configured in Okta matches the Callback URL used by the system.
Save the application after completing the configuration.
Step 4: Obtain Client IDAfter creating the OIDC application:
- Open the application in Okta.
- Go to the application's General section.
- Locate Client Credentials.
- Copy the Client ID.
Enter this value in the system as:
Client ID
Step 5: Obtain Client SecretFrom the application's Client Credentials section:
- Locate the Client Secret.
- Copy the Client Secret.
- Store it securely.
Enter this value in the system as:
Client Secret
Step 6: Obtain Okta DomainThe system requires the Okta Domain.
Your Okta domain is the domain associated with your Okta organization.
For example, if your Okta issuer is:
https://your-company.okta.com/oauth2/default
the Okta Domain is:
your-company.okta.com