Configuring Okta

This article will detail enabling and configuring Okta support in Solver. There are two steps:

1. Enabling Okta in Solver.
   • You must be a Solver Customer admin in order to do this step.
2. Creating and configuring an application in your Okta tenant.
   • you must be an Okta admin to create an application.

Enable Okta in Solver

To enable Okta in Solver, as a customer admin

1. Navigate to Settings > Administration.
2. Under Overview, enabled Okta.
3. A popup will appear, asking you for your Okta tenant Id, client Id and Client secret. Additionally, there are two redirect URIs that you will need to provide on the Okta configuration in the next section.
   
   

You now need to proceed to your Okta administration with the above mentioned URIs.

Creating and App and Configuration

Opening a new tab in your web browser:

1. Navigate to your Okta URL and log in as an admin
2. On the left hand side expand Applications and click Applications.
3. A listing on applications that you have created will appear.
4. It is recommended to create a new app specifically for Solver. To do so, click Create app integration.
5. In the popup that appears. you are creating a Web Application application type with OIDC – OpenID Connect sign in method.
6. Click Next.
7. On the next screen, you will need to define
   
   • App Integration Name: A descriptive name for this app. It is recommended to use Solver in the name you create to clearly identify the purpose of this app.
   • Sign-In Redirect URIs: this is the URI provide in the popup when you enabled Okta in Solver. Please copy and paste this URI from Solver.
   • Sign-Out Redirect URIs: this is the URI provide in the popup when you enabled Okta in Solver. Please copy and paste this URI from Solver.
   • Assignments: Define the users that should be able to authenticate via this Okta app. You can allow all, choose groups or skip. If you skip, you must configure access later before Okta integration will work in Solver.
     The Okta “Selected group(s)” textbox is case sensitive.
8. Click Save.
9. Upon clicking Save, the page will refresh and you app details will appear. No changes need to be made to this app unless you need at assign users.
10. The following information is needed for Solver.
    • Your Okta TenantId: this is the tenant Okta has given you. You can find this by looking at your admin URL login and grabbing the string of characters before okta.com
      • if you okta URL is https:mycompany-123-admin.okta.com, then you tenant ID is
        “mycompany-123”
    • On the Okta app you just created, in General tab, take note of your
      • ClientId
      • Client Secret
11. Copy these values into their respective text boxes back in Solver and click Ok.
    Client ID and Client Secret are never displayed in Solver after initial input.

Upon clicking Ok. you have successfully linked your Okta account to Solver.

End User Experience

Assuming that you have added users to Solver, once Okta is enabled:

1. Navigate to your Solver URL.
2. Type in your company email.
3. Choose Sign in with Okta.
4. You will be directed to the Okta sign in page where you will type in your email, password and MFA codes if applicable.
5. Assuming the above information is correct, you will be successfully authenticated in Okta and redirected back to Solver and a logged in user with permissions to various features as defined in Solver.

Editing your Okta configuration in Solver

Edits to the Okta TenantId, ClientId and/or Client Secret can be made in Solver once configured on the Okta side. To edit your existing Okta configuration:

1. As a Solver Customer admin, log into Solver.
2. Navigate to Settings > Administration.
3. Under Okta, click Change Settings.
4. Only your Okta tenant id will appear. Make the appropriate changes and click Save.

Changing this configuration can impact who can authenticate with Solver via Okta. Please review these changes carefully.

Disabling Okta

Should you want to disable or remove Okta authentication:

1. As a Solver Customer admin, log into Solver.
2. Navigate to Settings > Administration.
3. Under Okta, toggle off Okta. By doing this, your Okta information is completely removed from Solver.
   • NOTE: Users may still be able to log into Solver if they have setup Portal authentication. To completely remove a user from Solver, you must also remove them from your users list.

Frequently Asked Questions

1. Are Okta groups supported? Yes
2. Why do I not see my groups when configuring in Okta? Okta’s auto search feature is case-sensitive.
3. Are my clientID and clientSecret secure? Yes, this information is encrypted.