Okta

Overview

Okta acts as a SAML 2.0 identity provider for FOSSA. To connect them, you create a SAML app in Okta, point it at FOSSA's callback and audience values, then copy Okta's sign-on URL and signing certificate back into FOSSA.

Before you start, open FOSSA's authentication settings in another tab: go to Settings → Organization → Authentication. The Callback URL and Audience URI / SP Entity ID values there are needed while configuring Okta, and you'll paste Okta's certificate and sign-on URL back into this page at the end.

Configuring the Okta application

1. 1

   Create a SAML app in Okta

   In your Okta admin panel, go to Applications → Add Application → Create New App. Choose Web as the platform and SAML 2.0 as the sign-on method.

2. 2

   Name the app

   Name the app "FOSSA" and, optionally, upload a logo. Continue to the SAML settings.

3. 3

   Enter FOSSA's SAML values

   From FOSSA's Settings → Organization → Authentication page, copy the values into Okta's SAML settings:

   In Okta	Paste from FOSSA
   Single sign on URL	Callback URL
   Audience URI	Audience URI / SP Entity ID

   Then set Name ID format to EmailAddress and Application username to Email.

   Warning

   FOSSA identifies each user by the email address in the SAML Name ID. If the Name ID format isn't the user's email, logins fail to match an account.

4. 4

   Copy Okta's sign-on URL and certificate into FOSSA

   Click next and finish creating the app. On the application settings page Okta redirects you to, click View Setup Instructions. This opens a page with two values you need:

   1. In Identity Provider Single Sign On URL, enter Okta's Identity Provider Single Sign-On URL.
   2. In Certificate, paste Okta's X.509 Certificate.
5. 5

   Save in FOSSA

   Click Save Changes on FOSSA's Authentication page.

Result

Okta is now configured to authenticate users to FOSSA. For their first login, users click the FOSSA icon on their Okta dashboard, which redirects them to FOSSA and creates their account. After that, they can sign in directly from Okta, or by entering their email address on the FOSSA login page.