Configure SSO with Okta

1. Sign in to the Rapidfort Platform using an admin account.

2. Navigate to Settings > Single sign-on.

3. Complete the following fields:

• Display Name: This is the name that will appear on Okta's dashboard for this application.
• Client ID: The ID that the application uses to request authentication or access tokens from* Okta.
• Client Secret: Used alongside the Client ID to securely authenticate the application to Okta.
• Well-Known URI: A URI to retrieve metadata related to Okta’s configuration (e.g., authorization and token endpoints).
• IDP Scope: Defines the specific user information or resources requested during authentication.

How to generate Client ID and Client Secret from Okta Admin Console

To generate the Client ID and Client Secret:

1. Go to https://<YOUR_OKTA_DOMAIN_URL>-admin.okta.com/admin/getting-started.

2. Navigate to Applications > Applications

3. Click Create App Integration.

4. For Sign-in Method, select OIDC. For Application Type, select Web Application, and click Next.

5. On the new configuration page:
   • Adjust settings according to your organization’s needs.
   • Fill in fields such as App integration name, Grant type, and Assignments (skip assignments if not required for now).
   • Click Save.

App integration name

Grant type

Assignments

For the sake of this tutorial, We are skipping the assignment. It is advised to have some controlled access.

6. Save the configuration by clicking on Save
7. After saving, you will be redirected to the Application Dashboard. Here, copy the Client ID and Client Secret.

4. If you know the Well-Known URI, enter it. The typical format is https://YOUR_OKTA_DOMAIN.okta.com/oauth2/default/.well-known/openid-configuration For more information, visit Okta Support.
5. Fill in the IDP Scope according to your organization's requirements and click Submit.
6. After submission, you will see two IDP Redirect URLs.

7. Return to the Okta Application Dashboard, where you copied the Client ID and Client Secret:
   • Click Edit in the General Settings section.
   • Update the Sign-out Redirect URIs with the information from Rapidfort.
   • Click Save.

8. Sign out of the platform and test the new Sign-In configuration.