SSO with OKTA: Does this need SAML?

[Joseph_Russo]

We've gotten a couple of questions regarding a customer that has Single-Sign On with OKTA. In order to integrate with OnBase, would this require SAML? Are there any other factors to consider?

[Michelle_Servi5]

Can you update the link in your post?  It is not working.  Thanks,

Michelle

[AdamShaneHyland]

Here is the updated link ... https://community.hyland.com/forum/threads/38377-okta---secure-web-authentication

[Chad_Yarmock]

Hi Joseph,

To expand on Marcus' reply.

In OnBase 17 we introduced the Identity Provider Service, which is capable of doing SP-Initiated SSO. We have successfully integrated with OKTA, Shibbeloth, Azure SSO and a few other providers with it. In those cases we were using SAML, which does require an additional license. The IdP itself does not require any license.

Due to the way our current implementation of the IdP works we do not support IDP-Initiated, yet. This means if you had the Web Client using IdP configured as an application in OKTA you wouldn't be able to launch it seamlessly from the OKTA portal. You would instead first hit the Web Client URL which would redirect you to OKTA to authenticate.

Depending on your use case and setup, feel free to contact your First Line of Support and have them contact my team (Infrastructure) to assist.