Okta

Overview

Okta is an integrated identity and mobility management service. Built from the ground up in the cloud, Okta securely and simply connects people to their applications from any device, anywhere, at any time. Okta integrates with existing directories and identity systems, as well as thousands of on-premises, cloud, and mobile applications, and runs on a secure, reliable, and extensively audited cloud-based platform.

Okta SSO login page to Labii

Setup Labii SSO with Okta

To use Okta as your SAML IdP to connect with Labii:

1. Register an account with Okta.

2. Create an app: Admin -> Applications -> Create App Integration.

3. On the pop-out, select SAML 2.0, and click Next

4. On the General Settings page

   1. Set App Name to Labii

   2. Upload Labii logo to App logo. You can download a Labii icon at https://www.labii.com/media/labii_logo_200_fill_lightblue_darkblue.png

   3. Click Next

5. On the Configure SAML page

   1. Copy Acs url from Labii to Single-Sign-On URL.

   2. Copy Entity Id from Labii to Audience URI (SP Entity ID).

6. For the Attribution statements, add

   1. username -> user.email

   2. first_name -> user.firstName

   3. last_name -> user.lastName

   4. email -> user.email

7. Click Next

8. Click Finish to create the app.

9. On the General tab

   1. Under App Settings section, click Edit and set Provisioning to SCIM.

   2. Under App Embed Link section, copy Embed Link to IdP login url in Labii

10. On the Sign On tab, under SAML Signing Certificates section. Click the Actions of an active certificate, choose View IdP metadata. Copy the link of new tab and paste it to Metadata auto conf url in Labii.

11. On the Provisioning tab

    1. Click Edit of SCIM Connection

    2. Copy SCIM Base URL from Labii to SCIM connector base URL

    3. Set Unique identifier field for users as "email"

    4. Check all options for Supported provisioning actions

    5. Choose HTTP Header for Authentication Mode

    6. Copy SCIM Bearer Token from Labii to Authorization

    7. Click Test Connector Configuration

    8. Click Save

12. Under the To App of the Provisioning tab

    1. Click Edit and enable all options

13. Add one or more users at Directory -> People of the Okta admin page.

14. Assign the application to the new user in the Applications -> Labii -> Assignments.