Set Up Okta SSO

Overview

Okta SSO lets your team sign into Explore using their existing Okta accounts. This is set up using Okta's built-in Org2Org integration, connecting your Okta org to the Omniconvert org.

Warning

This is not a self-service setup. Before starting, contact Omniconvert support - your team will need to obtain the following values from us before configuration can begin: the Omniconvert Okta Hub URL (base URL), the Hub ACS URL, the Audience URI, and an API access token/Security Token.

Admin tasks overview

Setting this up involves four steps, each covered below:

  1. Add and configure the Org2Org Okta integration.

  2. Set up Org2Org API access.

  3. Configure Org2Org provisioning.

  4. Assign users/groups.

Step 1 - Add and configure the Org2Org Okta integration

Once you have the values from Omniconvert support:

  1. In your Okta Admin Panel, go to Applications → Applications → Browse App Catalog.

  2. Search for the Org2Org app integration.


    ​
  3. Open the App Integration and click Add Integration.

  4. You'll be redirected to the integration setup form. Fill in the basic information: give the integration a name (a descriptive label is recommended), and set the Base URL to the Omniconvert Okta Hub URL you received. Click Next.


    ​
  5. Under Sign on methods, choose SAML 2.0.

  6. Scroll to Advanced Sign-on Settings and set the SAML parameters:
    - Hub ACS URL (provided by Omniconvert support)
    - Audience URI (provided by Omniconvert support)
    ​

  7. Click Done.

Step 2 - Set up Org2Org API access

Once the integration is added, configure Provisioning by setting up API access.

  1. Get the API access token from Omniconvert support.

  2. In your Org2Org integration app, open the Provisioning tab and click Configure API Integration.


    ​
  3. Choose Enable API integration, insert the Security Token (provided by Omniconvert support), and click Test API Credentials.


    ​
  4. You should see: "Okta Org2Org was verified successfully!"

  5. Click Save.

Step 3 - Configure Org2Org provisioning

With the API connection ready, configure how identities provision from your Okta org into Omniconvert.

  1. In your Org2Org integration app, go to Provisioning → To App, and click Edit.

  2. Enable Create Users, Update User Attributes, and Deactivate Users.

  3. Enable Sync Password, and choose Password type → Sync Okta Password.


    ​
  4. Click Save.

Step 4 - Assign users and groups

The final step is granting access to your users.

  1. In your Org2Org integration app, open the Assignments tab and click Assign.

  2. Choose Assign to People for a specific user, or Assign to Groups for a whole group.

  3. Choose the User/Group, click Assign, and confirm.

  4. Click Done.

Done

Every assigned user can now sign into Explore using their Okta account.

Note

Sometimes, before accessing Explore for the first time, Okta users need to sign into their Okta account once to sync their new access rights.

Updated