How to Set Up Okta Single Sign On

Product Guides User settings
1

This guide will walk you through the steps needed to configure Okta as your Identity Provider to log into Marfeel.

In case of doubt, contact your account Manager or support and we’ll be happy to walk you through the setup.

Requirements

  • Admin access to an Okta organization
  • Admin access to a Marfeel organization on an Enterprise plan

Supported Features

Identity Provider (IdP)-Initiated Authentication (SSO) Flow - this authentication flow occurs when the user attempts to log into the application from the apps list in Okta.

Service Provider (SP)-Initiated Authentication (SSO) Flow - this authentication flow occurs when the user attempts to log into the application from Marfeel.

Just In Time (JIT) Provisioning - automatic user creation when a user authenticated in Okta accesses Marfeel for the first time.

User Federation, role management, etc. are not supported. Users and their Marfeel roles will still need to be managed from the Marfeel settings page.

Configuration Steps

  1. Contact your account manager, or support, prividing your Okta Domain (looks like xxx.okta.com). You will be provided an alias for your account.

  2. In Okta, Go to Applications → Browse App Catalog, and search and add Marfeel.
    Link to Marfeel’s App on Okta’s Integration Network

  3. Enter the provided alias in the required app settings.

  4. Assign the users or groups that should be able to log into Marfeel.

  5. Go to the Marfeel App → Sign On tab and note of the Client ID and Client Secret. Contact your account manager, or support, to provide them.

Logging Into Marfeel Using Okta

Once the Okta SSO is setup, users on the Marfeel account can login through Okta:

  1. Access Okta and navigate to the app’s page.
  2. Select Marfeel to login.

Alternatively, you can access Marfeel directly by navigating to http://hub.marfeel.com/sign-in/oidc/{alias}.

Once Okta is correctly configured as your identity provider for Marfeel, you can configure your SSO authentications as mandatory, to disallow user/password logins. Read more here.