Okta Integration with Koordinates ID
Okta integration is available for Enterprise Cloud customers. Please contact your account manager before configuring your Okta portal.
Using Okta allow organisation members to sign into Koordinates sites using their organisation directory accounts.
Koordinates ID Okta integration applies on a per email domain basis, so if it’s enabled for example.com users — all users with an @example.com email address will always be sent to Okta to authenticate.
It is possible to configure multiple domains against the same Okta application.
Okta Application Integration steps
Registrations are done from the Applications section of the Okta portal. Once someone with appropriate permissions is logged in, the setup of the integration is relatively straightforward:
From the Applications list, choose Create a new app integration.
Under Sign-in method select OIDC - OpenID Connect
Under Application type select Web Application.
Click Next to continue.
New Web App Integration
Set the following values, then Save to continue.
App integration name - Koordinates
Logo - https://cdn-misc.koordinates.com/logos/koordinates-okta.png
Grant type - Authorization Code should be the only option selected
Sign-in redirect URIs - https://id.koordinates.com/social/complete/okta-oauth2/
Sign-out redirect URIs - https://id.koordinates.com/logout/
Trusted Origins Base URIs - (empty)
Assignments Controlled access - Allow everyone in your organization to access
Terms of Service URI - https://koordinates.com/terms-of-use/
Policy URI - https://koordinates.com/privacy-policy/
Keys
After everything is saved, Koordinates is going to need the following values to enable the other side of the integration:
General Settings: Okta domain e.g. “dev-abc123.okta.com”
Client Credentials: Client ID
Client Credentials: Client secret
Please provide the Key in a secure manner:
Split across multiple communications channels
PGP encrypted message