Creating an SSO integration for Okta

The SSO integration with Oomnitza enables your users to seamlessly access Oomnitza by integrating with Okta's Single Sign-On (SSO) solution.  After you configure and assign the SSO Oomnitza integration, end users can sign in to their Okta account and then access their external applications without entering their credentials for each application.

Navigation

Enabling Oomnitza in Okta

Configuring SAML 2.0 for Oomnitza 

Verifying your SSO login

Troubleshooting

Enabling Oomnitza in Okta

To install and configure the Oomnitza add-on in Okta, complete the following steps:

1. In the Okta integrations page, search for Oomnitza and click +Add Integration.
2. Enter your subdomain in the sign-in URL field and follow the prompts to verify your identity with Okta.
   Your subdomain is the name of your Okta instance. For example, if your URL is
   https://mycompany.okta.com/, your subdomain is mycompany.
3. Follow the prompts to confirm your Oomnitza settings in Otka, and add your Oomnitza subdomain.
4. Optional: You will be prompted to add users that will have access to Oomnitza in the Assignments menu. You can configure this at a later point by going to Directory>People>Add Person in Okta.
5. Navigate to the Sign On tab and click View Setup Instructions. 
   You will be sent to the How to Configure SAML 2.0 for Oomnitza page.

Configuring SAML 2.0 for Oomnitza 

These steps are documented in the How to Configure SAML 2.0 for Oomnitza page. However, due to updates to the Oomnitza navigation menu the latest instructions are documented below.

1. In Oomnitza, go to Settings>Integrations.
2. Click Integrations List View .
3. On the Integrations page, scroll down to the SSO section.
4. Select Okta, and then click Next.
5. Enter your Okta SSO URL.
6. Copy the SSO URL provided in Step 5 of How to Configure SAML 2.0 for Oomnitza page, and enter it in your browser. Click the link to download the certificate.
   You need to be a signed in to the Okta Admin dashboard to view the SSO URL and the certificate link.
7. Select Choose file and upload your certificate to Oomnitza.
8. Optional: JIT Provisioning: Select this option if you want to support JIT provisioning.
9. Optional: SSO only: Select this option if you wish to prevent standard authentication to Oomnitza. We suggest that you do not select this option until you have tested the SSO feature and verified it works correctly.
10. Select the Default Role that the newly imported or JIT provisioned users will be assigned at the time their account is created.
11. Select the Name Identifier used to identify the imported or JIT provisioned user. 
12. Click Finish.

Verifying your SSO login

To verify the steps in Configuring SAML 2.0 for Oomnitza, do the following:

1. Navigate to the Oomnitza login page.
2. Click Single Sign-On. Your Otka login page should appear.
3. Follow the prompts to verify your identity with Okta and log in to Oomnitza.

Alternatively, users can verify their SSO login with Oomnitza from within Okta by selecting the Oomnitza app on their Dashboard. They should be automatically directed to their Oomnitza instance without entering their credentials. 

You can assign the Oomnitza application to users by going to Directory>People>Add Person in Okta. For further information, refer to the Okta Help Centre Documentation.

Troubleshooting

You may receive a 401 Unauthorized response when logging into Oomnitza. This status code indicates that the Okta user is not a valid user in Oomnitza.