How To Setup Okta For SSO

Okta Setup

Step 1

Sign in to your Okta tenant as an administrator.

Step 2

In the Admin Console, navigate to Applications > Applications.

Step 3

Click Create App Integration.

Step 4

In the Create a new app integration dialog, choose SAML 2.0 and click Next.

Step 5

For App name enter Y Meadows and click Next.

Step 6

In Configure SAML step, in the SAML Settings section, enter values for:

Field Name	Value	Notes
Single sign on URL	https://<CLIENT SUBDOMAIN>.ymeadows.com/auth/realms/tier0/broker/okta/endpoint	Replace <CLIENT SUBDOMAIN> with the client’s Y Meadows subdomain.
Audience URI (SP Entity ID)	https://<CLIENT SUBDOMAIN>.ymeadows.com/auth/realms/tier0	Replace <CLIENT SUBDOMAIN> with the client’s Y Meadows subdomain.

Step 7

Click Next.

Step 8

In the last page, select I'm an Okta customer adding an internal app, and click Finish.

Step 9

From the menu, click Sign On configuration for the application you are working on. Hover over Identity Provider metadata link, right-click and select from the menu Copy link.

Open https://ultimatesecurity.pro/img/okta-saml-metadata.JPG

You will need that URL that you copied for the Y Meadows portion of the setup.

Y Meadows Keycloak Setup

Step 1

Go to https://<CLIENT SUBDOMAIN>.ymeadows.com/auth

Make sure Tier0 is selected from the dropdown on the top left

Step 2

Click Identity Providers.

Step 3

Click Add provider…

Click SAML v2.0

Step 4

Set Alias to okta.

In the bottom section under the heading SAML entity descriptor paste the URL you got in the last step of the previous section under Import from URL.

Click Add.

Step 5

Under First Login Flow choose AutoLink

Step 6

Click Save