Configure OIDC Application In OKTA
  • 28 May 2024
  • 3 Minutes to read

Configure OIDC Application In OKTA


Article summary

In this Article

This article explains the steps to configure OIDC Application in OKTA.

Set up an OIDC Application in OKTA

  1. Login to Okta (https://okta.com), click on Admin

  1. Select Applications from left menu and click Create App Integration

  2. Select Sign-In method as OIDC - OpenID Connect and Application type as Web Application and click next.

  3. A New Web App Integration window will be opened. We need to fill in the details as mentioned below:

    1. Enter the App integration name e.g.: SaaSify App

    2. Select Grant types - Authorization Code and Implicit (hybrid)

    3. In Sign-In redirect URIs, and Sign-out redirect URIs use Add URI action to add the below URLs

      1. Sign-In redirect URIs : Remove the existing Sign-In redirect URI i.e http://localhost:8080/authorization-code/callback and add the below as per your environment:

        1. https://api-demo.saasify.ai/authorization-code/callback (This is valid for UAT tenants. Production URLs will be shared by the SaaSify team).

      2. Sign-out redirect URIs : Remove the existing Sign-out redirect URI i.e http://localhost:8080 and add the below as per your environment:

        1. https://<your-custom-domain-name>.saasify.ai/welcome - (This will be provided by SaaSify Team)

  4. Under the controlled access, select the option as applicable.

    1. If you select Allow everyone in your organization to access” then you need to check the box for “Enable immediate access with Federation Broker Mode” or if you selectLimit access to selected groups then you need to enter “Selected group(s)

    2. For testing purposes you can select Allow everyone in your organization to access” then you need to check the box for “Enable immediate access with Federation Broker Mode.”

  5. Click Save

  6. A new integration App will be created with the name SaaSify App.
    We need to capture the details mentioned below and give to SaaSify team; This information is securely managed in key vault.

    1. General section: Client ID and Client Secret

    2. Profile Section: Okta Domain name

      Note :

      Please share Client ID and Client Secret, Okta Domain name with SaaSify PSM Team.

    3. API section

      1. Navigate to Security section and select API.

      2. In the API menu, select the "Authorization Servers" option.

      3. You will see a list of authorization servers configured in your Okta account.

      4. Ensure the default Authorization Service is Active.  

         

Next Step

  • Follow the steps in next page to Add users in OKTA.