Configuring OKTA (OpenID Connect)
  • 21 Aug 2020
  • 1 Minute To Read
  • Contributors
  • Print
  • Share
  • Dark
    Light

Configuring OKTA (OpenID Connect)

  • Print
  • Share
  • Dark
    Light

Supported Features


The following features are supported:

  • Service Provider (SP)-Initiated Authentication (SSO) Flow


Requirements


All accounts can use OKTA OpenID Connect for Single Sign On to both platform and security center applications. 

Configuration within the CultureAI platform is currently performed by the support team, you will need to provide the following information (which you can obtain following the configuration steps below):

Okta DomainThe base domain or Custom URL you use for OKTA (e.g. clientsubdomain.okta.com)
Client IDThis is OpenID Public Identifier from the application configuration panel.
Client SecretThis is the token used by the CultureAI platform to generate authorization tokens.


Configuration Steps


  • In your OKTA control panel, select "Applications > Applications" from the top-menu and "Add Application" from the Applications screen:


  • Search for and add the CultureAI application:


  • In the application options, open the Sign On tab:


Once you have the client ID and Client Secret, please reach out to the CultureAI support team and we will activate Single Sign On.


Notes


Once Single Sign On has been enabled, authentication can be triggered through one of the following routes:

  • Clients using a custom URL (e.g. securitycentre.yourdomain.com) will automatically have their users redirected to OKTA and logged into the platform if authenticated.
  • Clients using the default URL (e.g. securitycentre.culture.ai), users will be redirected to OKTA once they enter their email address and press login.


Known Issues/Troubleshooting


There are no known issues with the OKTA configuration, however please reach out to the CultureAI support team if you have any issues or questions.

Was This Article Helpful?