...
Create Developer Account at https://developer.okta.com/signup/ and compete the signup process. For this the setup in this article, we will be using Workforce Identify Cloud Account.
Figure 1: Okta Developer Account Sign up
2. Login to OKTA Developer Account
...
Go to your Okta developer account, and navigate to Applications > Create App Integration.
Figure 12: Okta Developer Dashboard - Creating App Integration
4. Choose SAML 2.0.
Figure 23: App Integration - SAML 2.0
...
You may click on "Do not display application icon to users" if you do not want this app to appear in Okta's end user interfaces.
Figure 34: General Settings
In the next screen, we will be required to provide SSO URL and SP Entity ID.
Figure 45: SAML Settings
Here we will need Single sign-on URL & Audience URI (SP Entity ID). Please key in the following in both the fields
...
Change Name ID format onto EmailAddress.
Figure 56: SAML Setting (General)
Scroll down to Attribute Statements (optional) and fill up the attribute mappings. The mappings are needed to identify the users that will be logging in.
Figure 67: Attribute Statements
| Name | Value |
|---|---|
firstName | user.firstName |
lastName | user.lastName |
| user.email |
...
Edit the app integration that we have just created on Okta.
Figure 78: Obtaining Metadata
Copy the Metadata URL and open it in a new window. Copy the entire content.
Figure 89: Metadata
Scroll down to look for SHA-2 cert and download certificate.
Figure 910: Download Certificate
Figure 1011: Okta Certificate
5. Add users to App Integration
We will need to assign user(s) to the app. Navigate to Applications > Assignments > Assign.
Figure 1412: Assign Users to App
Once assigned, the selected users are now abe to SSO into Joget using their identity in Okta.
...
3. Once the plugin in uploaded, go to Settings → Directly Manager Settings and choose SAML Service Provider Directory Manager
Figure 1113: Select Plugin
Open the certificate with your text editor and copy the value and paste it into Joget.
Figure 1214: Paste the Cert Content
Paste the content into Metadata in Joget.
Figure 1315: Paste Metadata
| Info | ||
|---|---|---|
| ||
You may want to check on User Provisioning Enabled so that if it is the first time an user SSO into Joget, an user account would be created in Joget and the user would be able to continue to log in to Joget. |
Configure the User Attributes.
Figure 1416: Configure User Attributes
...
Configure the Login Button. This login button will be shown at the Joget Login Screen to enable use to perform Single Sign On (SSO) using OKTA.
Figure 1517: Configure Login Button
Up to this point, we have successfully created app integration in Okta and configured the SAML Service Provider Directory Manager plugin in Joget.
...
| Info | ||
|---|---|---|
| ||
Login screen may differ as show below depending on the App Center but login button will be shown. |
Figure 1618: Joget Login screen
Upon clicking on the blue login button, the user will be redirected to Okta.
Figure 19: OKTA Login Screen
Upon successfully login in Okta with your registered email you would be redirected back to Joget and will be logged in.
...