OKTA

OKTA

Setup OKTA connect

1. Create a test account at https://www.okta.com/
2. Go to https://*******-admin.okta.com/admin/apps/active

3. Click on Add Application
4. Create a new app
5. Select Platform Web and SAML 2.0

6. In the SAML Settings fill in the following fields:

1. Single Sign On URL
2. http://<your-subdomain>.mobilize.io/users/auth/saml/callback
3. Recipient URL
4. http://<your-subdomain>.mobilize.io/users/auth/saml/callback
5. Destination URL
6. http://<your-subdomain>.mobilize.io/users/auth/saml/callback
7. Audience Restriction
8. http://<your-subdomain>.mobilize.io/users/auth/saml/metadata

7. In the assignments tab:

1. Make sure you added the member in the assignments

8. Go to Sign on tab

1. View Setup Instructions

1. Copy Identity Provider Single Sign-On URL and paste it in Mobilize Setup screen in SSO Target URL
2. Copy Identity Provider Issuer and paste in Mobilize setup screen in Metadata url
3. Download Certificate

1. You will need to create a sha1 hash for the certificate.
2. In osx open the terminal to where you downloaded the certificate
3. And run openssl x509 -noout -fingerprint -sha1 -inform pem -in okta.cert
4. Copy the output and pase it in fingerprints field in Mobilize setup

-------------------------------------------

DORI TEST

https://help.okta.com/en/prod/Content/Topics/Apps/Apps_App_Integration_Wizard_SAML.htm?cshid=ext_Apps_App_Integration_Wizard-saml

SAML Settings

Single Sign On URL

http://test-dori.mobilize.local/users/auth/saml/callback

Audience Restriction

http://test-dori.mobilize.local/users/auth/saml/metadata

Identity Provider Issuer -> Metadata url

Identity Provider Single Sign-On URL -> SSO Target URL

Fingerprint:

Download certificate

Need to create a hash of the certificate using sha1 algorithm