Use this section to see where settings from NetCloud Manager's Open ID Connect (OIDC) SSO configuration go in an Okta app, and where settings from the Okta app go in NetCloud Manager's SSO configuration.
These steps assume you have an Okta OIDC IdP app ready to integrate with NetCloud Manager. And that you have navigated to the Add/Edit Identity Provider wizard in NetCloud Manager.
Step | Screen Reference |
|---|---|
NoteYour Okta app for OIDC SSO must use the OIDC - OpenID Connect sign-in method type. Web Application must be selected as the Application type. | |
The Redirect URI from the NetCloud Manager configuration goes in the Okta app's Sign-in Redirect URLs field on the General tab. | |
The Client ID is listed on the Okta app's General tab in the Client Credentials section. The Client ID value goes in the NetCloud Manager integration's Client ID field. | |
The Client Secret is listed on the Okta app's General tab in the Client Secrets section. The Client Secret value goes in the NetCloud Manager integration's Client Secret field. | |
The Discovery Endpoint value uses the following form: https://<your okta instance url>/oauth2/default/.well-known/openid-configuration Replace the <your okta instance url> placeholder in the example with your own Okta instance URL. The Discovery Endpoint value goes in the NetCloud Manager integration's Discovery Endpoint field. TipThe Discovery Endpoint can be tested by pasting it in a web browser. It should return a JSON object with information about the OIDC SSO integration. | |
Locate the Token Claims section on the Sign On tab of the Okta app. Claims for first name, last name and email address uniquely identify users and are required for the NetCloud Manager integration. When using the Alias feature, a claim for it must be created using the expression "user.profile.department". For integrating an Okta IdP app with NetCloud Manager, the Okta claim names need to be mapped to the NetCloud Manager claim names on the Claims Mappings page. |