Okta

Octa

Brief description

Explain SSO.

What is SSO (Single Sign On)?

  • This function enables authentication for multiple web services with only one set of ID/Password.
  • In particular, if Okta is introduced, SSO can be achieved even between service providers with different deployment environments such as cloud, on-premises, and mobile applications.
What is SSO (Single Sign On)?

Authentication method for realizing SSO

  • SAML
    Standard protocol, supported by many products.
  • WS-Federation
    It is often used in Microsoft products. Similar behavior to SAML.
  • Secure Web Authentication (SWA)
    An authentication scheme created by Okta to provide SSO for applications that do not support SAML. Install the Okta plugin in the user's browser and let the plugin fill in the credentials on your behalf.
  • Open ID Connect
    A standard mechanism for next-generation authentication and federated identity systems.

Sp initiated and IdP initiated

Differences in authentication order

  • Sp initiated: format starting with Sp
    1. Access Box → Enter your email address → Transition to the IdP screen
    2. Access Microsoft 365 → Enter UPN → Transition to IdP screen
  • IdP initiated: format starting with IdP
    1. Okta Portal

* Depending on the specifications of the SP, only one of them may be available.

Okta Integration Network (OIN)

  • Okta comes pre-configured with a set of configurations for major web applications.
    * More than 6,000 sites (1,500 visible with evaluation license)
  • Simply select any application from a catalog (list) called OIN
    Single Sign-On linkage is possible.
  • WEB services that are not on OIN can also be linked by creating new ones yourself.
    (Own web application, etc.)
Okta Integration Network (OIN)

Just find the application in the search filter and press the Add button

Okta portal screen

Web portal
There is a portal screen for Okta users, and you can access each resource by clicking the service icon. (Folders can also be divided)

Okta portal screen

Add OIN Application

This section describes how to create an application using SWA.
SWA is a function that automatically enters character strings such as user names and passwords for web pages that use form authentication. To use it, you need to install the Okta browser plugin.

This section describes how to add the twitter application in OIN. Specifically, the procedure for creating an application, assigning a user to the application, and entering the user name and password when logging in to twitter.
We will also show you how to link shared accounts to target users.

Add OIN Application

  • Go to Applications > Applications screen
Add OIN Application
  • Click Browse App Catalog
Add OIN Application
  • Enter part of the application name you want to create in the search form and select from the displayed search results
    *In this procedure, Box is selected as an example.
Add OIN Application
  • Click Add
Add OIN Application
  • Since the contents of General Settings are displayed, click Next after setting
Add OIN Application

*The above is the default setting

  • Select User Sets username and password and click Done
Add OIN Application

User assignment

  • On the Assignments tab, click Assign, then click Assign to People
User assignment
  • Select users to access this application with Assign
User assignment
  • Click Save and Go Back
User assignment
  • Click Done to complete user assignment
User assignment

User-side setting method

  • Log in to Okta portal with the target user. Since the plugin is required, click install
User-side setting method
  • Click Add to Chrome to add the Okta Browser Plugin to your browser
User-side setting method

*The above is when Chrome is used as a browser.

  • A confirmation pop-up will appear, click Add Extension
User-side setting method
  • Return to the Okta portal screen and click the box icon
User-side setting method
  • Enter your username and password and click Sign In
User-side setting method
  • Account information is automatically entered after the login page is displayed, and login to box is completed.
User-side setting method

[Reference] Assignment of shared accounts

In SWA settings, select User share a single username and password Set by administrator and enter the shared account

[Reference] Assignment of shared accounts

Adding applications without OIN

From here, I will explain the procedure for linking with an application using SWA when there is no OIN.

Adding applications without OIN

  • Transition to Applications > Applications screen
Adding applications without IN
  • Click Create App Integration
Adding applications without IN
  • Select Secure Web Authentication (SWA) and click Next
Adding applications without IN
  • Since the settings of General App Settings are displayed, enter the App name and App's login page URL and move to the bottom of the screen
    *In this procedure, enter Okta Ice from the demo site prepared by Okta as an example.
Adding applications without IN
  • The settings for how to sign in to the application will be displayed, so click Finish with the default
Adding applications without IN

*By setting User sets username and password, the user can set the account and password for logging in to the application.

User assignment

  • On the Assignments tab, click Assign, then click Assign to People
User assignment
  • Select users to access this application with Assign
User assignment
  • Click Save and Go Back
User assignment
  • Click Done to complete user assignment
User assignment

Adding applications without OIN (user side)

  • Click on the target application on the Okta portal, enter your username and password, and click Sign In, just like you would with OIN.
Adding applications without OIN (user side)
  • Account information is automatically entered after the login page is displayed, and login to Okta Ice is completed.
Adding applications without OIN (user side)

Inquiry/Document request

In charge of Macnica Okta Co., Ltd.

Mon-Fri 8:45-17:30