Create OIDC App Integration in Okta

Configure Okta App Integration

1. Log in to the Okta Administrator Panel.

2. Go to Applications and click Create App Integration.
   
   

3. Click OIDC - OpenID Connect and then click on Web Application and click Next.
   

   Note: Scroll down and keep default values and just click Next.

4. Copy your client ID and client secret.
   These values are used when configuring this application on ZPE Cloud Platform.
   

5. Assign the users that has access to ZPE Cloud.

Configure Okta with ZPE CLOUD SSO

1. Log in to ZPE Cloud as administrator.

2. Go to Settings :: SSO :: Identity providers.

3. Click Add to add a new SSO provider.

4. Select Protocol as OIDC and Provider as Okta.

5. Enter the information from Add Okta App Integration.
    

   1. Enter the name that was used in the Reply URL on Okta, the recommended value is okta.

   2. Enter a description for the SSO.

   3. Enter the client ID and client secret. You can obtain the client ID and client secret from the identity provider. These are defined during configuring Okta App integration.

   4. Enter the Provider URL that identifies your OIDC identity provider.

Post configuration on Okta

On ZPE Cloud, SSO table, you can view the ACS URL, for the OIDC configuration that was just created.

1. Click and copy the ACS URL.
   

2. Log in to Okta admin page, in Login section, edit Sign-in redirect URIs value, add the ACS URL and append “/callback” at the end.

3. Select Either Okta or App in the drop-down Login initiated by and enter the values as mentioned in the following image.