Configure OKTA with Open ID Connect

DISCLAIMER

This page contains third-party references. We strive for our content to always be up-to-date, however, the content referring to external vendors may change independently of Omada. If you spot any inconsistency, please report it to our Helpdesk.

To configure OKTA with Open ID Connect:

1. Log in to the OKTA Administration page and select Applications.

2. As Omada is currently not in the pre-configured Okta listings, create a new Application.

3. In the Create a new app intergation window:

   • select OIDC – OpenID Connect as a sign-in method,

   • select Web Application as an application type.

     

4. Click Next.

5. In the New Web App Integration window, in the General settings section, provide information for the following, mandatory settings:

   • Provide the App integration name.

   • In the Grant type field, in the Client acting on behalf of a user setting, select the Implicit (hybrid) checkbox.

   • In the Sign-in redirect URIs field, specify the URL to the logon.aspx page in the Omada Identity Portal, for example, https://youromadasite.omada.cloud/logon.aspx.

   • In the Sign-out redirect URIs, specify the URL to the logoff page, for example, https://youromadasite.omada.cloud/logoff.aspx.

     
   note

   In the Assignments section, you can specify how you want to assign Omada to your users.

6. In the Login section, fill in the following information:

   • In the Login initiated by field, select the Either Okta or App option.

   • Configure the Application visibility options as needed for your environment.

   • In the Login flow field, select the Redirect to app to initiate login (OIDC Compliant) option.

   • Specify the Initiate login URI, for example, https://youromadasite.demo.cloud/logon.aspx.

     

7. Click Save.

8. Next, save the OKTA generated information, such as Client Credentials and Client Secrets information.

Then, proceed to the next section to configure settings in Omada.

Omada configuration

1. Log in to the Omada portal, that is, https://portal.omada.cloud.

2. To configure the created environment, in the Actions column, select the Configure option.

   

3. Click on the ellipse icon in the top right corner and click Copy JSON Configuration – this contains all of the Cloud settings including the Authentication tab.

   • Save the JSON for backup.

     

4. In the Authentication tab, fill in the following information:

   • Provide the User name.

     • This will become the initial user of the solution. User name must match the logon for SSO.

   • Provide the Email address.

     • This is the email address that Omada cloud will send the notifications to. It doesn't have to match the User Name.

   • In the Authentication type field, select the OpendID Connect.

   • Select Okta as a Provider.

   • In the Client ID field, provide the Client ID generated by Okta.

   • Provide the Okta Base URL, for example, something.oktapreview.com.

     • This example uses an Okta test site for this URL.

   • In the OpenID Claim Types field, provide the following claim types:

     • email,upn,given_name,preferred_username,azp,sub

   • Provide the Logoff URL, for example, https://yourcloudname.omada.cloud/logoff.aspx.

   
   note

   Some configuration options are auto generated by Omada and are labelled as such.

5. Click the Apply button to save your changes.