SSO: Okta

Single sign-on allows users to access Quinto with their Okta credentials using a public key handshake method.

Step 1. Create an Okta application

1. Go to your Okta dashboard: https://Your-OKTA-TENANT-URL]/admin/dashboard

2. Expand Applications in the side menu and select Applications.

3. Click Create App Integration.

4. Select OIDC - OpenID Connect as the sign-in method.

5. Select Single-Page Application as the application type.

6. Enter Quinto SSO as the app integration name.

7. Select Authorization code and Refresh token as the grant types.

8. Enter https://[YOUR-QUINTO-URL]/login as the sign in-redirect.

9. Enter https://[YOUR-QUINTO-URL] as the sign out-redirect.

10. Select the appropriate assignments options and click Save.

Step 2. Set up SSO in Quinto

1. Click the gear icon on the top right of your screen.

2. Select General administration in the drop-down.

3. Click Account settings under General in the side menu.

4. Scroll to the bottom of the page and turn on Single sign-on.

5. Select Okta as the provider.

6. Enter the Okta SPA App Client ID as the Client ID.

7. Enter [https://Your-OKTA-TENANT-URL]/oauth2/default as the Authorization URL.

8. Enter [https://Your-OKTA-TENANT-URL]/oauth2/default/v1/keys as the Keys URL.

9. Click Save.

Users accessing Quinto via SSO need to have the same email address in Quinto and the Okta tenant. Their account should also be active in Quinto and Okta.