How to Configure Okta Single Sign-on

Overview

This page explains the steps to configure Single Sign-on (SSO) login to Josys using Okta.

Configure Integration

Create Application

1. In the Okta Admin console, go to Applications > Applications and click Create App integration.
   
2. Select SAML 2.0 and click Next.
   
3. In General Settings, enter the App Name and click Next at the bottom right of the screen.
   
4. Open Josys and click Settings > Single Sign-on.
5. Click the "Configure SSO" button.
6. Copy the ACS URL and Entity ID, then paste them into Okta.
   
   Audience URI (SP Entity ID): Entity ID
   Single sign on URL: ACS URL
7. Select EmailAddress for Name ID format.
   
8. Click Next at the bottom right of the screen.
9. On the Feedback screen, select App type: "This is an internal app that we have created".
   
10. Click Finish at the bottom right of the screen.

SAML Settings

1. Once the screen transitions, the Sign On tab will open.
2. Click View SAML setup instructions at the bottom right.
3. Register the items displayed on the screen into Josys.
   Josys IdP Login URL: Identity Provider Single Sign-On URL
   Josys IdP Entity ID: Identity Provider Issuer
   Josys Certificate: X.509 Certificate
   *Please copy including "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----".
   
4. Once entered, click Register at the bottom right of the Josys SSO configuration pop-up.
5. In Okta, configure the accounts or groups that will use SSO. From the Assignments tab, click Assign, select People or Groups, and add them.

Test Integration

Josys Admin Console

1. Open Josys and click Settings > Single Sign-on.
2. Click "Authentication Test".
3. The process is complete once the SAML authentication test results are displayed.
   

Josys Employee Portal

1. Click "Settings > Employee Portal" in the left sidebar of the Josys admin screen.
2. Click the Single Sign-on tab.
3. Click the three-dot icon (...) and click "Authentication Test".
   
4. The process is complete once the test results are displayed.