Okta Identity Platform
This document brings an agile tutorial on how to set up Single-sign-on authentication method for Okta Identity provider platform.
Creating Deskbee Application on Okta Admin Portal and setting up SSO (SAML 2.0)
Access your Okta Admin Console at https://<YourCompanyName>-admin.okta.com/admin go to Applications and click on Create App Integration
2. Choose SAML 2.0 option and click on Next
3. Enter a name for your application, add a logo (optional) by clicking on the upload button, and click on Next
Note: Before move on to the SAML settings, it is necessary to get the Deskbee URLs that is going to be inserted into the URL fields in the next step.
4. Go to your Deskbee Admin panel heading over to https://admin.deskbee.app/YourCompanyName
Note: You have to log in using a Master or Admin account.
5. Expand Integrations and click on Authentication
6. Turn on SSO SAML 2.0 authentication
7. Go to the bottom of the page at Access Provider Data section and copy the Entity ID and the ACS response URL as shown below. The Logout URL is optional.
8. Go back to your Okta Admin portal, and paste the 2 URLs mentioned in the previous item into the proper fields as shown below:
URLs from Deskbee Admin Panel that should match on Okta Admin Portal:
Deskbee Panel | Okta Admin Portal |
Identifier (Entity ID) | Audience URI (SP Entity ID) |
ACS response URL (consumer service declaration) | Single sign on URL |
9. Change the fields Name ID format and Application username to the values “Persistent” and “Email” respectively as shown below
10. On Attribute Statements section, add the first Claim value as “user.firstName”, and insert the User Name attribute from Deskbee Admin panel as shown below. Keep Name format option as “Unspecified”. Click on Add Another button and do the same for the Claims “user.lastName” and “user.email” just like shown below.
11. Click on Next
12. On Feedback tab, just select the proper options according to your Okta client profile and click on Finish button.
13. In the next screen, click on View Setup Instructions and a new tab will be open with the settings needed to configure Deskbee application
Here you have all the information needed to set up Deskbee application:
Download and save the Okta certificate, you will need to upload it on Deskbee Panel later on.
14. Go back to your Deskbee panel. On Connection name field, enter a name for your connection and insert the proper URLs matching the fields as shown below
URLs from Okta Admin portal that should match on Deskbee Panel:
Okta Admin Portal | Deskbee Panel |
Identity Provider Single-Sign-On URL | Login URL |
Identity Provider Issuer | Identity ID (Identifier URL) |
15. Upload Okta Certificate that you downloaded in the item 13 by clicking on Base 64 SAML Certificate field. Before select the cert file, rename it from okta.cert to okta.cer (just change the file extension). Then select okta.cer and upload it
16. Scroll down to the bottom of the page and click on Save configurations button
17. In order to make the Deskbee app available to allowed users, do not forget to add them in your Okta Admin portal by clicking on Applications and Assign Users to App
18. To access your Deskbee app, just head over to https://<YourCompanyName>.deskbee.app and click on the button you named for your login method.
Versioning:
Version | Author | Date |
v1.1 | Eduardo de Oliveira | 09/12/2022 |
v1.0 | Eduardo de Oliveira | 01/03/2022 |