Creating Okta OAuth credentials

Best practice
For the integration with Oomnitza, create a dedicated user account.

To run the Okta OAuth user loads and workflows, you must use the Okta Developer Console to create an app. For further information, see Okta Developer Documentation: Set up your app. 

Complete the following steps:

1. Open the Admin Console for your org.
2.  Go to Applications > Applications 
3. Click Create App Integration.
4. Select OIDC - OpenID Connect as the Sign-in method.
5. Select Web Application as the Application type, then click Next
6. The following is required to run the app in Oomnitza:
   1. Under Grant Type, ensure that Authorization Code and Refresh Token are selected.
   2. Enter the following Sign-in redirect URI https://generic-oauth2-proxy.oomnitza.com/oauth2/redirect_url
7. Fill in the remaining details for your app integration, then click Save.
8. Copy your Client ID and Secret for use in Oomnitza.
9. Select the Okta API Scopes tab. Ensure the following scopes are selected:
   1. okta.users.read
   2. okta.users.manage

Adding the credentials

To add your Okta credentials in Oomnitza, complete the following steps:

Make life easier and add your credentials to Oomnitza before you create the integration.  

1. In Oomnitza, click Configuration > Security > Credentials.
2. Click Add new credential (+).
3. Search for the integration, and then click the forward arrow > to select the integration.
4. Enter your client credentials and any other additional information.
5. Click Authenticate. You are prompted to log in to authorize your request.
6. Click CREATE.

1. On the INFORMATION tab, complete these actions:
   1. Add the name of the credential.
   2. Add the name of the owner. 
2. Ensure that OAuth 2.0 is selected as the Authorization type.
3. Ensure that Okta is selected from the SaaS list.
4. Enter your Client ID, Secret, Base URL and Scopes. 
5. Click Authenticate. You are prompted to log into Okta to authorize your request.
6. Click CREATE.