1. Display name

Choose a name for your identity provider. This is the user-facing name, so choose a name your users will recognize. This value can be changed later.

Open

2. Redirect Mode

Select how the user will be redirected to the identity provider. You may configure more redirect modes after completing the setup.

Open

3. Prepare IDP

Copy and save the Callback URL for later. You will need this when configuring Okta.

Configure Okta

External

Login to Okta as an admin user.

Go to Applications → Applications in the menu and choose Browse App Catalog.

Sarch for Kantega and then select Kantega SSO.

Then click Add integration

Enter an appropriate Application label in General Settings.

Click Next.

Select OpenID Connect (OIDC) as Sign on method.

Copy (right click) and keep the URL from the link: OpenID Provider Metadata. You will need this in a later step of the Identity Provider setup in KSSO.

Paste the Callback URL you copied in Kantega SSO Identity provider setup (step Prepare IDP) and paste it into the field OIDC Redirect URL.

Press Done.

Select the Assignments tab. Assign your integration to users or groups.

Select the Sign on tab. Copy and keep the Client ID and Client secret for later use. You will need these in a later step in the Identity Provder setup in KSSO.

Go back to the Kantega SSO setup wizard.

4. Metadata

In the Metadata step paste the URL you copied from the link, OpenID Provider Metadata into IDP Discovery URL.

5. Scopes

These are the scopes we were able to fetch from the metadata. You can add scope values from a list, start typing to add your own or unselect them. A minimum of one scope value is required.

6. Credentials

Paste the Client ID and Client Secret you kept from the Okta App Sign On settings earlier.

7. Summary

Check that everything looks good and submit your setup

Test

Test that logging in with Okta works as expected. This will help identify if there are any issues with the configuration. Follow the steps to perform the login test.