Okta SSO Integration

Introduction

This guide offers a comprehensive walkthrough for configuring Biopass as an OpenID Connect (OIDC) Identity Provider within Okta. By doing so, you will enable Passwordless authentication for Okta applications, also known as Relying Parties. The Passwordless authentication experience allows users to securely access these applications without needing to remember or enter passwords. By following this guide, you'll learn how to integrate Biopass with Okta and enhance the user experience for your Okta applications.

Prerequisites

To follow this guide, you should have:

• An active Okta account with administrator access (Sign up for a free trial at https://www.okta.com/free-trial/ if you don't have one)
• An active Biopass account with administrator access
• An application (Relying Party), such as a web application, mobile app, or API, that utilizes Okta for authentication through OIDC.

Create an OIDC Application in Biopass

1. Sign in to the Biopass Admin Dashboard

1. Navigate to the Biopass Admin Dashboard and sign in using your Biopass administrator account.
2. From the Dashboard, click on the "Applications" tab.

2. Create a new OIDC Application

1. Click the "Add New Application" button.
2. Choose "Regular Web Application".
3. Fill in the "Application Name" field with a name for your application.
4. Choose a "Policy".
5. At this stage, the "Allowed Callback URL" for Okta is unknown; therefore, select a temporary URL. Once the Okta configuration is complete, this field will be updated with the appropriate value.
6. Click "Create" to proceed.

3. Add a Group to your Application

1. Click the "Group" tab.
2. Click the "Add Group" button.
3. Choose a "Group".

The button turns to a search bar, find the group you want in the list and click on it.

Create an Identity Provider in Okta

1. Sign in to the Okta Developer Console

1. Navigate to the Okta Developer Console and sign in using your Okta administrator account.
2. Expand the "Security" tab from the Dashboard, and click the "Identity Providers" tab.

2. Add a new Identity Provider

1. Click the "Add Identity Provider" button.
2. Choose the "OpenID Connect" type.
3. Click "Next" to proceed.

3. Configure General Settings

1. Fill in the "Name" field with a name for your identity provider, ie. "Biopass".
2. Choose "SSO only" as "Idp Usage".
3. Choose "openid", "email", and "profile" as "Scopes".

4. Obtain Biopass OIDC Application Credentials

1. From the "Applications" tab in the Biopass Admin Dashboard, click on the name of the OIDC application you created.
2. Copy the "Client ID", "Client Secret", and "Issuer" values from the "Settings" tab.

5. Configure Client Details

1. Fill in the "Client ID" and "Client Secret" fields with credentials from the previous step.
2. Choose "Client secret" as "Authentication type" field.

6. Configure Endpoints

1. Fill in the "Issuer" field with the value obtained from the OIDC Application in Biopass.
2. Fill in the "Authorization endpoint" with "<Your_Issuer>/authorize" value.
3. Fill in the "Token endpoint" with "<Your_Issuer>/token" value.
4. Fill in the "JWKS endpoint" with "<Your_Issuer>/.well-known/jwks.json" value.
5. Click "Finish" to proceed.

Configure Allowed Callback URL in Biopass

1. Obtain Redirect URI from Okta

1. Go back to the list of "Identity Providers" in Okta
2. Click the Identity Provider you created to expand the details.
3. Copy the "Redirect URI".

2. Configure Biopass

1. From the "Applications" tab in the Biopass Admin Dashboard, click on the name of the OIDC application you created.
2. Click Edit button (pen icon) in the "Allowed Callback URLs" section.
3. Click the "Add Callback URL" button.
4. Paste the "Redirect URI" copied from Okta.
5. Click "Save" to proceed.

Test the OIDC Integration

Proceed to log in to your application using Okta as you normally would. You should now be redirected to Biopass for Passwordless Authentication! Voila! 😃