Add Identity Provider
Steps to add Identity Provider:
On the home page of the Okta Admin Console, go to Security > Identity Providers.
Select Add Identity Provider.
The identity provider list is displayed.
Select OpenID Connect and click Next.
The Configure OpenID Connect IdP dialog box is displayed.
Do the following
Under General settings section:
Name : Enter a name for the Identity Provider configuration.
Scopes: Leave the defaults. These scopes are included when Okta makes an OpenID Connect request to the Identity Provider.
Under Client details section:
Enter Client ID.
See Tenant Admin Portal > Identity Provider > IDP Details > Meta Data tab for client ID.
Enter Client Secret.
See Tenant Admin Portal > Identity Provider > IDP Details > Meta Data tab for client secret.
Under Endpoints section:
Enter Issuer.
Enter Authorization endpoint.
Enter Token endpoint.
Enter JWKS endpoint.
See Tenant Admin Portal > Identity Provider > IDP Details > Meta Data tab for respective data.
Under Authentication Settings section,
Select Enable automatic linking from Account Link Policy.
If no match is found, select Redirect to Okta sign-in page option.
Click Finish.
The newly created IDP is listed under Security > Identity Providers.
Note: In the search bar, you can search using identity provider name .
Go to IDP details and do the following:
Copy IDP ID and enter it in Tenant Admin Portal > Identity Provider > IDP Settings > IDP ID.
Copy Redirect URl and enter it in Tenant Admin Portal > Identity Provider > IDP Settings > Callback URL.
Enter https://{user-id}.okta.com/ in the Authorize URL and Redirect URL fields under Tenant Admin Portal > Identity Provider > IDP Settings. For example,
https://dev-10453970.okta.com/
Add Client Application
Steps to add client application:
In the Okta Admin Console, go to Applications > Applications.
Select Create App Integration.
The Create a new app integration pop-up box is displayed.
Do the following:
Select OIDC - OpenID Connect as the Sign-in method and Web Application as Application type.
Select Next.
In the next screen, configure the application.
Under General Settings section,
Enter App integration name.
Select Authorization Code as Grant type (If not already selected).
Under Sign-in redirect URIs section, add https://{yourOrg}.okta.com in the text field.
Under Sign-out redirect URIs section, add https://{yourOrg}.okta.com in the text field. (Optional)
Under Assignments section, select Allow everyone in your organization to access.
Click Save. Add the ClientID and Client Secret of the new app in Tenant Admin Portal > Identity Provider > IDP Details > IDP Settings tab.
Configure the IDP Profile in the Tenant Admin Portal:
On the homepage of the portal, select the preferred IDP to edit.
On the IDP details page, select the WebKey Application from Select WebKey Application dropdown.
Click Save.
On the top-right corner of the preferred WebKey application, select Open login URL to view the configured WebKey application in your browser.
Related Document