Configure SSO Okta dashboard

To use Single-Sign on (SSO) with Okta, you need to configure the Okta dashboard.

1. Log into the Okta website (https://www.okta.com).

2. In the left pane, click Applications > Applications.

3. Click Create App Integration.

4. Choose OIDC - OpenID Connect as the sign-in method.

5. Choose Single-Page Application as the application type.

6. Click Next.

7. In the Name box, enter a name for the application.

8. Under Sign-in redirect URIs:

   1. Check Allow wildcard * in sign-in URI redirect.
   2. Enter the URL of your hila stack. For example: https://ui.your-stack-domain.
9. Under LOGOUT:
   1. Enter the URL of your hila stack.
   2. Initiate login URI: Enter the URL of the hila stack.
   3. Grant type allowed: Select Authorization Code.

10. Under Assignments click Skip group assignments for now.

11. Click Save.

12. Click the Assignments tab and assign people or groups as needed.

13. Click the Access Policies tab.

    1. For the default rule, click the edit icon.

    2. Set up the rule to look like the following image:

       

14. Click Actions and then Add Claim.

    1. In the Name box, enter groups.

    2. In the Include in token type box, select ID Token and Always.

    3. In the Value box, enter groups.

    4. Under Filter, enter .* for the Machine regex.

    5. Click Create.

Okta is configured for hila SSO. Next, you need to configure the hila stack. For more information, see Configure Single Sign-On (SSO).

For more Okta documentation, see Okta docs.