Thereforeâ„¢ Help

How do I integrate Okta into Thereforeâ„¢ as a User Directory?

 

 

1.Preparation in Okta:

For the OpenId Connect token, we need to create a new Client ID in the Okta Tenant. This is a required prerequisite for this feature to work. Below are the step-by-step instructions to create such a client application for Thereforeâ„¢.

2.Within Okta, build your directory by creating users and user groups and assigning them accordingly.

 

3.Create an API Token in Okta.

4.Name the token (e.g. ‘Therefore’) and click ‘Create Token’.

5.Copy the generated token provided in the dialog.

 

6.Create a Client Application:

7.Configure the platform for the application.

8.Configure the application settings.

 

9.Copy the generated Client ID provided in the dialog and select Use PKCE under Client authentication.

 

10.   Establish a connection in the Thereforeâ„¢ Solution Designer by double-clicking on the External User Directories node. Then click Add and select the option Okta.

11.  Enter the Okta domain name and the API Access Key, which was displayed when the client application was created. The Therefore Client Id is the ID of the client application created. Additional Domains are required if the Okta directory also contains users from other domains. For example: if the directory contains users like testuser@therefore.okta.com, and also users like test@ontherefore.com, ontherefore.com must be entered in the Additional Domains field. Click OK to establish the connection.

 

12.   Once the connection has been established, the new domain can be accessed from user or group selection dialogs to select users and groups and grant the appropriate permissions.

13.   When connecting to Thereforeâ„¢ through an installed client application, the connection settings need to be configured. For Login using, select the option for Okta, then click Settings.

14.  The Therefore Client Id must be set to the same application Id created in the preparation step, which was also added to the configuration in the Thereforeâ„¢ Solution Designer. The Domain name needs to be set to the corresponding Okta domain name.