> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Create and Configure Okta (OIDC) as an Identity Provider in Okta Admin Console

> This document provides information on how to configure Okta (OIDC) for Oloid SSO

## Introduction

This document provides instructions to configure **Okta (OIDC)** as an Identity Provider for **Oloid Single Sign-On (SSO)**.

## Prerequisites

* You must have admin access to the **Okta Admin Console**
* Okta **OIDC (OpenID Connect)** support enabled.

## Steps to Add Identity Provider

1. On the home page of the Okta Admin Console, go to **Security** > **Identity Providers**.

   ![How to Create and Configure Okta (OIDC)... - screenshot 1](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-54ed99eb.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=d7aa5d27d82ae4762b3a6d67d61785f9)
2. Select **Add Identity Provider**.

   ![How to Create and Configure Okta (OIDC)... - screenshot 2](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-260155c7.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=a37e047b474b2bc7bdd9d35d9e1a207b)

   The identity provider list is displayed.
3. Select **OpenID Connect** and click **Next**.

   ![How to Create and Configure Okta (OIDC)... - screenshot 3](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-e0f52264.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=bb572c87a6fd611a56cdc196373d181a)

   The **Configure OpenID Connect IdP** dialog box is displayed.
4. Do the following
   1. Under **General settings** section:
      1. **Name:** Enter a namefor the Identity Provider configuration.
      2. **Scopes**: Leave the defaults. These scopes are included when Okta makes an OpenID Connect request to the Identity Provider.

         ![How to Create and Configure Okta (OIDC)... - screenshot 4](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-c1a7fee8.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=bdec78696435e7ffc0d16b59ab976d03)
   2. Under **Client details** section:
      1. Enter **Client ID.**
      2. Enter **Client Secret**.

         ![How to Create and Configure Okta (OIDC)... - screenshot 5](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-647a0f0c.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=0aa7814c2de4488d407f0bae5c5ccbe3)

         > [!NOTE]
         >
         > **Note:** You can find the **Client ID** and **Client Secret** in your Oloid portal. On the Tenant Admin Portal, go to **Identity Provider > IDP Details > Meta Data** tab.

         ![How to Create and Configure Okta (OIDC)... - screenshot 6](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/3441adda-02de-4e93-a491-510566510a08-77798ab2.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=4c642c9ca40992f473989ed769380c74)
   3. Under **Endpoints section:**
      1. Enter **Issuer**.
      2. Enter **Authorization endpoint**.
      3. Enter **Token endpoint**.
      4. Enter **JWKS endpoint**.

         ![How to Create and Configure Okta (OIDC)... - screenshot 7](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-827eb701.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=808694a61e46605f6e7515c8b95b1a73)

         > [!NOTE]
         >
         > **Note:** You can find the **Issuer, Authorization Endpoint, Token Endpoint** and **JWKS Endpoint** in your Oloid Portal. On the Tenant Admin Portal, go to **Identity Provider > IDP Details > Meta Data** tab.

         ![How to Create and Configure Okta (OIDC)... - screenshot 8](https://mintcdn.com/oloid-999c42b2/1BzEWPnXFpEPVJML/images/intercom/9154143/2ce0da7c-c5ce-4ea4-93a9-7f8cc55a252d-e22d6bb7.png?fit=max\&auto=format\&n=1BzEWPnXFpEPVJML\&q=85\&s=9e9bf26ec2f18364755dd2c225d61ab8)
5. Under **Authentication Settings** section,
   1. Select **Enable automatic linking** from **Account Link Policy**.
   2. If no match is found, select **Reject the authentication responses from IdP**.

      ![How to Create and Configure Okta (OIDC)... - screenshot 9](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/d44ba6df-3832-4218-b7f8-058b1e2cae74-ed4e4b91.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=d95e14c14e330d9b91f98e60361126c3)
6. Click **Finish**.
   The newly created IDP is listed under **Security** > **Identity Providers.**

   > [!NOTE]
   >
   > **Note:** In the search bar, you can search using identity provider name.

   ![How to Create and Configure Okta (OIDC)... - screenshot 10](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-1944df21.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=2249963c297ffed8942ce7e86ac1d356)
7. Go to IDP details and do the following:
   1. Copy **IDP ID** and enter it in **Tenant Admin Portal > Identity Provider > IDP Settings > IDP ID**.
   2. Copy **Redirect URl** and enter it in **Tenant Admin Portal > Identity Provider > IDP Settings** > **Callback URL**.
   3. Enter **[https://\{user-id}.okta.com/](https://%7Buser-id%7D.okta.com/)** in the **Authorize URL** and **Redirect URL** fields under **Tenant Admin Portal > Identity Provider > IDP Settings**. For example, `https://dev-10453970.okta.com/`

      ![How to Create and Configure Okta (OIDC)... - screenshot 11](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-72730472.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=a46bbbc83d9cade15b6be361f3469bb6)

      ![How to Create and Configure Okta (OIDC)... - screenshot 12](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/51ba2615-a338-408d-a202-6d971b6667c7-079d3ba5.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=4d8292c251600c6f141dc85bd1ea6db2)

## Add Client Application

1. In the Okta Admin Console, go to **Applications** > **Applications**.

   ![How to Create and Configure Okta (OIDC)... - screenshot 13](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-e5212b63.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=dd169731b8f13e464ea5dd1ca2276b0e)
2. Select **Create App Integration**.

   ![How to Create and Configure Okta (OIDC)... - screenshot 14](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-809849f1.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=224a831a6acb617930b38ac697d613e5)

   The **Create a new app integration** pop-up box is displayed.

   ![How to Create and Configure Okta (OIDC)... - screenshot 15](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-56f7d543.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=52cf85e43d5db9a56bfca9658fcb61f3)
3. Do the following:
   1. Select **OIDC - OpenID Connect** as the **Sign-in method** and **Web Application** as **Application type**.
   2. Select **Next**.

      ![How to Create and Configure Okta (OIDC)... - screenshot 16](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-e09e4721.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=fe9af7e065a6638d1aa3cb45c1796bbb)
4. In the next screen, configure the application.
   1. Under **General Settings** section,
      1. Enter **App integration name**.
      2. Select **Authorization Code** as **Grant type** (If not already selected).

         ![How to Create and Configure Okta (OIDC)... - screenshot 17](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-2d1d01d8.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=d751631aeb83ebfc3d3a857b48bf6956)
   2. Enter **Sign-in redirect URIs.**

      > [!NOTE]
      >
      > **Note:** The Sign-in redirect URls must be set to **[https://\{yourOrg}.okta.com](https://%7ByourOrg%7D.okta.com)**.

      ![How to Create and Configure Okta (OIDC)... - screenshot 18](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-fc4d0288.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=db904d26617a13d7823685be5f4a9385)
   3. Enter **Sign-out redirect URIs** (Optional)**.**

      > [!NOTE]
      >
      > **Note:** The Sign-out redirect URls must be set to **[https://\{yourOrg}.okta.com](https://%7ByourOrg%7D.okta.com)**.

      ![How to Create and Configure Okta (OIDC)... - screenshot 19](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-e1a003a8.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=471d3219854e73f51bbe92b5b30e8121)
   4. Under **Assignments** section, select **Allow everyone in your organization to access**.

      ![How to Create and Configure Okta (OIDC)... - screenshot 20](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-faa95807.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=3b96e3648bdd7ffdfd2dad9441a38ade)
5. Click **Save**.
   Add the **ClientID** and **Client Secret** of the new app in **Tenant Admin Portal > Identity Provider > IDP Details > IDP Settings** tab\*\*.\*\*

   ![How to Create and Configure Okta (OIDC)... - screenshot 21](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-3d1a549e.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=8a0e8c51b3210fc55dde631b29c023a0)

   ![How to Create and Configure Okta (OIDC)... - screenshot 22](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/image-0a235068.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=56753bea52dfa92ee9d7c8f556885219)
6. Configure the IDP Profile in the Tenant Admin Portal:
   1. On the homepage of the portal, select the preferred IDP to edit.
   2. On the IDP details page, select the **WebKey** Application from **Select WebKey Application** dropdown.

      ![How to Create and Configure Okta (OIDC)... - screenshot 23](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9154143/dd5ab6de-29d3-4a19-85f3-3008d1101ffa-7615ab17.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=81d1c6d8aaef51e7840bdaa6618548a3)
7. Click **Save**.
8. On the top-right corner of the preferred WebKey application, select **Open login URL** to view the configured WebKey application in your browser.

##### Related Document

[How to configure OIDC - Okta IDP Profile](https://oloid.help/en/articles/9215949-how-to-configure-oidc-okta-idp-profile)