Articles in this section

See more

SSO and Connect: Adding Connect to Okta

Avatar
Jeff
  • Updated

Note: In these steps, we recommend using a temporary document to make note of several security strings you will need to complete your setup. However you choose to do this, be sure to keep your document or note secure, and delete or destroy it if necessary when you are finished.

  1. Sign in to your organization’s Okta portal as an application administrator or a super administrator.
    • For example, yourcompany.okta.com
    • This is called your "Okta domain." Make a note of it so you can use it later when you configure Okta within Connect.
    • An easy way to obtain this information is to copy it to the clipboard from your user found in the profile drop down menu in the upper right corner of the Okta Admin Console, like in the screenshot below:copy_okta_domain_to_clipboard.png
  2. Click Admin at the top right of the Dashboard screen.
  3. In the sidebar on the left side of the screen, expand Applications, then click Applications.
    If the sidebar is not present, click the "hamburger" menu at the top left.
  4. Click Create App Integration.
  5. For Sign-in method, select OIDC - OpenID Connect.
    Once you do this, the window will expand to show Application type.
  6. For Application type, select Web Application, then click Next.
  7. Enter Extensis Connect in the App integration name field.
    You can name this something else but just make sure you can recognize it.
  8. Optional: Add a logo to your app.
    1. Drag the logo below to your desktop.
    2. Click the Upload icon.
    3. Browse to your desktop and select the extensis-connect.png image.
    4. Click Apply in the Upload New Logo dialog.

    We'd appreciate if you use our logo, but of course if you have a logo or icon you'd prefer, we can't stop you.
  9. In the first field under Sign-in redirect URIs, enter https://auth.extensis.com/oauth2/v1/authorize/callback.
    Do not select the Allow wildcard option.
  10. Click Clear to the right of the Sign-out redirect URIs field.
    This will clear the field so that there is not an accidental redirect when a user logs out of Extensis Connect.
  11. Assign groups for access control.
    This is an optional process. You will need to add individual user accounts within Extensis Connect anyway.
    Note: If you decide to Allow everyone, make sure that you disable Federated Broker Mode
    We recommend that you select Skip group assignment for now, then continue to the next step.

  12. If you want to limit access to Extensis Connect to one or more groups, then follow this process:
    1. Under Assignments, select Limit access to select groups.
    2. In the Selected groups field, enter group names, separated by commas.
      Connect will restrict access to members of these groups, so be sure everyone that you want to have access is a member of one or more of the selected groups.

    For in-depth instructions on how to assign the app integration to individual users and groups, see the Assign app integrations topic in the Okta product documentation.
  13. Click Save.
    Okta will display your application's page.
  14. Under Client Credentials, click Copy next to the Client ID.
    Paste this into a temporary text document so you can add it to Extensis Connect later. (Be sure to label this text as "Client ID".)
  15. Under Client Secret, click Copy to the right of the first secret in the list.

    Paste this into the temporary document in your text editor.

 

 

That's it! The next step is to configure Okta within Extensis Connect.

 

These instructions are adapted from https://developer.okta.com/docs/guides/add-an-external-idp/oktatookta/main/. Please refer to this page first if you have questions on this process.

Related articles