Configuring Okta with SAML

Integrating Okta with SolarArchive allows you to manage user authentication and authorization seamlessly. This tutorial will guide you through creating an Okta Developer account, setting up an application, configuring OAuth, and finally, connecting it with Solar Archive.

1. Creating an Okta Developer Account

1. Visit the Okta Developer signup page at https://developer.okta.com/signup/.

2. Fill in the required details as shown in the signup form.

3. Click "Sign Up" to create your developer account.

4. Verify your account by clicking on the link sent to your email.

2. Create an Application in Okta

1. After logging in, navigate to the "Applications" section from the left-hand side menu.

2. Click on "Add Application" and then select "Create New App".

3. Choose "Web" as the platform and select "OpenID Connect" as the sign-on method. Click "Create".

4. Enter your Application Name and Redirect URIs where you want Okta to send the authentication response. Click "Save".

5. Note down the "Client ID" and "Client Secret" presented to you; these will be used later when creating a connection in SolarArchive.

6. Ensure you select both "Authorization Code" and "Refresh Token" grant types to enable OAuth login.

3. Configure OAuth & Required Endpoints

1. Navigate to the "API" section under the "Security" option in the left-hand side menu to find your "Issuer URI".

   
2. Note down the following endpoints using your "Issuer URI":

   • {Issuer URI}/v1/authorize

   • {Issuer URI}/v1/token

   • {Issuer URI}/v1/userinfo

3. Assign users to your created application by navigating to "Assignments" under the application settings, clicking "Assign", and selecting users or groups as needed.

(Optional) Secondary Email Addresses in UserInfo

1. Go to the "API" section under "Security" and select the "Claims" tab.

2. Click on the "Edit" icon and navigate to the "Claims" section.

   
3. Fill in the details to create a new claim for the user's secondary email address. The key you enter in the "Name" field will be the one used in Solar Archive to refer to this secondary email address.

4. Registering the OAuth Connection in Solar Archive

1. In Solar Archive, navigate to "SSO-OAuth" under "Adv. Configuration".

2. Enter the connection details for your Okta application, including the "Client ID", "Client Secret", and the endpoints configured in Step 3.