Configuring Okta as Identity Provider for Historical Reporting

Last Updated : Mar 23, 2022 |
Prolog information
Metadata
Keywords:
Use this procedure to create a SAML integration application with Okta for SAML authentication with Historical Reporting. The terms used here are specific to Okta as an Identity Provider (IDP).
Before you begin
You need a unique identifier of the web application to be recognized by the IDP. For example, AnalyticsWebHome.
You need the URL that IDP sends and receives SAML requests and responses. For example, https://cluster.fqdn/AvayaAnalytics.
  1. Log in to the Okta application.
  2. Select Create New App to create a new SAML application.
  3. In Create a New Application Integration, select PlatformWeb.
    1. Select Sign on method.
    2. Click Create.
  4. In General Settings, add an App name for the SAML integration.
  5. In SAML Settings page, select the following:
    1. Select the Single sign on URL property, add the URL from which an IDP sends and receives SAML requests and responses.
      ADDITIONAL INFORMATION:
      For example, https://cluster.fqdn/AvayaAnalytics and append on /saml/SSO
    2. In the Audience URL (SP Entity ID) property, add the unique identifier of the web application to be recognized by the IDP.
      ADDITIONAL INFORMATION:
      For example, AnalyticsWebHome.
    3. Add Additional attribute statements as needed. For example,
      ADDITIONAL INFORMATION:
      Name Name format Value
      DisplayName unspecified user.displayName
      Email unspecified user.email
    4. Add Group attribute statements. For example,
      ADDITIONAL INFORMATION:
      Name Name format Value
      Groups unspecified Matches regex .* (matches all groups)
  6. Preview the SAML Assertion and click Next.
  7. On Okta feedback, click Finish to complete the SAML application.
  8. Go to AssignmentsGroupsAssign.
    ADDITIONAL INFORMATION:
    If the web admin page is configured to be protected by SAML, groups must be assigned to this role on Okta.
    1. On the Assign SAML application to Groups, select groups and click Assign.
    2. Click Done.
  9. To download the IDPMetadata for your SAML application, on the Sign On tab, click the Identity Provider metadata link. This generates the metadata.
  10. Save the generated metadata as IDPMetadata.xml.
  11. Copy the IDPMetadata.xml to CCM using WinSCP.
    ADDITIONAL INFORMATION:
    This file is used for SAML configuration on Historical Reporting.