> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Tenant Admin Portal - How to Configure OIDC - Okta IDP Profile

> This document provides step-by-step instructions to configure OIDC - Okta IDP Profile in the Tenant Admin Portal.

## Introduction

This document explains how to configure an **OIDC - Okta** Identity Provider (IDP) profile in the Tenant Admin Portal.

## Prerequisites

* You must have admin access to the Tenant Admin Portal.
* Ensure that the Webkey application is created. To create Webkey application, refer [How to create and configure WebKey Application in Tenant Admin Portal](https://oloid.help/en/articles/8693859-how-to-create-and-configure-webkey-application-in-tenant-admin-portal).
* You must configure OKTA IDP and generate the required SSO configuration details in the **PingOne Administrator Console**. For instructions, see [How to Create and Configure Okta (OIDC) as an Identity Provider in Okta Admin Console](https://oloid.help/en/articles/9154143-how-to-create-and-configure-okta-oidc-as-an-identity-provider-in-okta-admin-console).

## Steps to configure OIDC-Okta IDP Profile

1. Log in to the **Tenant Admin Portal**.
2. On the **Applications** page, click **Security** > **Identity Provider**.

   ![How to Configure OIDC - Okta IDP Profile - screenshot 1](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-548e8be2.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=db55dfdcae52e9719f6d8d4ece7f813a)

   The **Identity Provider Profiles** page is displayed.
3. Click the IDP application.

   ![How to Configure OIDC - Okta IDP Profile - screenshot 2](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/ff05bd72-af01-4409-8e8e-b62eb95e6bdb-f7403f6f.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=786ac307efbab908d06be4d2c3810ca0)

   The IDP application details page is displayed.
4. Do the following:
   1. [Configure Details tab](#configure-details-tab)
   2. [Integrate Oloid Metadata tab](#integrate-oloid-metadata-tab)
   3. [Configure IDP Settings tab](#configure-idp-settings-tab)
   4. [Configure Claims Tab](#configure-claims-tab-optional)
      The IDP Profile is configured successfully.

### Configure Details Tab

The Details tab is used to view and manage the basic information such as IDP Name, IDP Description, etc. for the identity provider configured in the Tenant Admin Portal.

To configure the Details tab, do the following:

1. Edit the **IDP Profile Name**. (Optional)

   ![How to Configure OIDC - Okta IDP Profile - screenshot 3](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-5b0d039a.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=c1f54a2bc61465bc789ff66722e2ac4f)
2. Enter **Description**. (optional)

   ![How to Configure OIDC - Okta IDP Profile - screenshot 4](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-c0c6ab16.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=9db86b053611a734ef3328ffb0d745dd)
3. Do one of the following:
   1. Select the required WebKey application from the **Select WebKey Application** dropdown list.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 5](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/237af1cd-9508-460c-8c25-623bf278eec6-5f0d8da1.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=b54829314b2cecf2406d5529118ffd0d)

      (OR)
   2. Click **Make Default** to set this IDP as the default. (Optional)

      > [!NOTE]
      >
      > **Note:** The **Make Default** button is enabled only when more than one IDP is added in the Tenant Admin Portal.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 6](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-1fd56525.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=a5d957210c6b12f207166e35e9ac0eaf)

      The **Set this as Default IDP** pop-up box is displayed.

      1. Select the **Webkey Application**.
      2. Select **Set as Default**.

         ![How to Configure OIDC - Okta IDP Profile - screenshot 7](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-86896458.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=6b53726d7fae7df2f55577d0fd3478b0)

         The WebKey application is set as the default, and the application is linked to this IDP.
4. Click **Save**.

   ![How to Configure OIDC - Okta IDP Profile - screenshot 8](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-34e25dd8.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=2f2cfcff00e3d30d1593528d01916749)

   > [!NOTE]
   >
   > **Note:** If another IDP is currently set as default, it will be replaced upon confirmation.

   * To make IdP as default, click **Make Default**. The confirmation box is displayed.
   * Click **Set as Default** to designate the preferred IDP as default.

![How to Configure OIDC - Okta IDP Profile - screenshot 9](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/fd786cd3-9105-4326-b0c0-d84a80db1990-ff44d310.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=c644d9d57413d166f52c8fba13250a71)

The Details tab is configured successfully.

![How to Configure OIDC - Okta IDP Profile - screenshot 10](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-a3c600bd.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=524ac308412f1fbbf17d27677050548b)

### Integrate Oloid Metadata Tab

The Metadata tab is used to provide the required information to configure OKTA settings and enable OKTA based authentication between the identity provider and the Tenant Admin Portal.

1. Click **Oloid Metadata**.
   The Oloid Metadata tab is displayed.

   ![How to Configure OIDC - Okta IDP Profile - screenshot 11](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-f60d863a.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=3e38596a04b19815cfdc6ad6bbdaf010)
2. Click [Visit help page](https://oloid.help/en/articles/9154143-connecting-your-oloid-tenant-to-your-okta-oidc-instance) for the document to configure Okta settings for SSO login.
3. **Download Oloid Metadata:** Download the oloid metadata certificate and upload it to the **IDP Signature Certificate** field.

   ![How to Configure OIDC - Okta IDP Profile - screenshot 12](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-137ff074.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=8b2db3c33abc627f87217dabd2128caf)

### Configure IDP Settings Tab

The **IDP Settings** tab is used to configure and upload the required OKTA details to enable authentication between the identity provider and Tenant Admin Portal.

To configure the IDP settings tab, do the following:

1. Click the **IDP Settings** tab.
   The IDP Settings page is displayed.

   ![How to Configure OIDC - Okta IDP Profile - screenshot 13](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-72d131c2.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=b566fc09651d1a6f21bfe9185241ad67)
2. Do the following:
   1. Enter **IDP ID**.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 14](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-3ec81dfd.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=c8bc86e837e7e035a9becdbf92eba425)

      > [!NOTE]
      >
      > **Note:** You can find the **IDP ID** from your OKTA Admin Console under **Security** > **Identity Providers** > select preferred Identity Provider from the list.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 15](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-d276a575.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=7f03bc5431247f78ac66d6903adcfbb2)
   2. Enter **Application Client ID**.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 16](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-078e5093.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=b83814dc6f2f3e8962095bcc99e850b1)

      > [!NOTE]
      >
      > **Note:** You can find the **Application Client ID** from your OKTA Admin Console under **Applications** > **Applications** > select preferred application > **General** tab > **Client Credentials** section.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 17](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-562f1cb9.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=83246c96b5148467df175a89a04f8584)
   3. Enter **Authorize URL**.

      > [!NOTE]
      >
      > **Note:** Enter **[https://\{user-id}.okta.com/](https://%7Buser-id%7D.okta.com/)** in the **Authorize URL** field.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 18](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-870376c6.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=dd7cda1f4cedf9e6f434681a480f1a00)
   4. Enter **Redirect URL**.

      > [!NOTE]
      >
      > **Note:** Enter **[https://\{user-id}.okta.com/](https://%7Buser-id%7D.okta.com/)** in the **Redirect URL** field.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 19](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-2ede5021.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=700d902e225c9418ad291f7dbf9dc3c6)
   5. Enter **Callback URL**.

      > [!NOTE]
      >
      > **Note:** To add multiple Callback URLs, click the **+** icon.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 20](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-2801c2fc.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=0034fc0d92b3cdcb3507e282105d6907)

      > [!NOTE]
      >
      > **Note:** You can find the Callback URL as **Redirect URL** from your OKTA Admin Console under **Security** > **Identity Providers** > select preferred Identity Provider from the list.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 21](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-38a68082.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=dfd91098e5573851dfb50fccfcc69dc1)
   6. Enter **Secret**.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 22](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-b19f4bb0.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=1e08cf1e625ba9db8a8011c1217b27e8)

      > [!NOTE]
      >
      > **Note:** You can find the **Secret** from your OKTA Admin Console under **Applications**> **Applications** > select preferred application > **General** tab > Client Secret.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 23](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-48632932.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=2582ffaeb1058c0932602e311e3f8b64)
   7. **Home URL:** Enter the URL of the home page.
   8. **Home Label Button:** Enter the text displayed on the **Home** button.

      ![How to Configure OIDC - Okta IDP Profile - screenshot 24](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-aed19257.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=4c0449e0dc706530f66368753b59c4a0)
   9. Click **Save.**

      ![How to Configure OIDC - Okta IDP Profile - screenshot 25](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-d1bea6fa.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=2787b61565a8bd46ca101c1f15f24cf3)

      The IDP settings tab is configured successfully.

### Configure Claims Tab (Optional)

The **Claims** tab is used to configure custom claims that pass user attributes from Oloid to the OIDC provider.

Do the following:

* [Custom Claims](#custom-claims)
* [Authentication Methods References (AMR) Claims](#authentication-methods-references-amr-claims)

  ![How to Configure OIDC - Okta IDP Profile - screenshot 26](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-2fa07f86.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=4106f60b3927c5b04d2bf84983882b39)

The Custom Claims tab is configured successfully.

#### Custom Claims

Custom Claims allow the admin to map Oloid user attributes to OIDC attributes.

Do the following:

1. In the **Custom Claims** tab, expand the **Custom Claims** section.
   The Custom Claims section is displayed.

   ![How to Configure OIDC - Okta IDP Profile - screenshot 27](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-f36b366d.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=369562fcd721b298f5976ff0059301d3)

2. In the **Custom Claims** section, click **Add Field**.

3. In the **OIDC Attribute** field, enter the OIDC Attribute.

4. Select the Oloid Value from the **Oloid Value** dropdown.

   > [!NOTE]
   >
   > **Note:** Click **Add Field** to add additional claim.

5. Click **Save.**

   ![How to Configure OIDC - Okta IDP Profile - screenshot 28](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/09497f4f-26e3-4737-9d39-0ce91a93d5e5-5aa44640.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=ff40754172231aad3ac8c040a135e7bf)

   The Custom claims are configured successfully.

   ![How to Configure OIDC - Okta IDP Profile - screenshot 29](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-92f1d6eb.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=c5982b75c2d517bd16d52e67c75c1573)

### Authentication Methods References (AMR) Claims

**AMR Claims** indicate **how a user was authenticated** during the login process.

1. In the **AMR Claims** tab, expand the **AMR Claims** section.
   The AMR Claims section is displayed.

   ![How to Configure OIDC - Okta IDP Profile - screenshot 30](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-3eb5e68e.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=7964384de84536a2d5005fa96b2d1b00)

2. In the **AMR Claims** section enter the authentication method value.

   ![How to Configure OIDC - Okta IDP Profile - screenshot 31](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/a6f55bf4-1c50-4ae8-bcf3-a7845ec37ddc-adbb90e3.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=ac671a11bd986446e167e061899c1112)

   > [!NOTE]
   >
   > **Note:** Click **Add** to add additional AMR claim items.

3. Click **Save.**

   ![How to Configure OIDC - Okta IDP Profile - screenshot 32](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-3fa2c755.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=f462825bf7e785184a15de47b6563266)

   The AMR section is configured successfully.

   ![How to Configure OIDC - Okta IDP Profile - screenshot 33](https://mintcdn.com/oloid-999c42b2/kmLYs12Sy2o2AyB7/images/intercom/9215949/image-fa47e3f4.png?fit=max\&auto=format\&n=kmLYs12Sy2o2AyB7\&q=85\&s=9512782fdaed868d79b00eb505d78cea)

#### Related Article

[How to Create and Configure Okta (OIDC) as an Identity Provider in Okta Admin Console](https://oloid.help/en/articles/9154143-how-to-create-and-configure-okta-oidc-as-an-identity-provider-in-okta-admin-console)