IAM Lab

Product Chosen: Okta Lab Task: Configure Single Sign-On (SSO) for a sample application.

Lab Question:

Set up Okta to enable SSO for a sample application, allowing a user to log in seamlessly using their Okta credentials.

Answer (Steps):

  1. Sign up for a free Okta developer account at developer.okta.com.

  2. Log into the Okta Admin Console with your credentials.

  3. Add a new application:

    • Go to Applications > Applications and click Create App Integration.

    • Select SAML 2.0 (or OpenID Connect if preferred) and click Next.

    • App Name: "Sample App"

    • Click Next and configure basic SAML settings (e.g., Single Sign-On URL and Audience URI can use dummy values like http://localhost for testing).

    • Click Finish.

  4. Assign the application:

    • Go to Applications > Sample App > Assignments.

    • Click Assign and select a user or group (e.g., yourself), then save.

  5. Test the SSO:

    • Log out, then access the Okta dashboard as the assigned user.

    • Click the "Sample App" tile to verify SSO redirection.

Verification:

  • When you click the app tile, you should be redirected to the application (or a test page) without needing to re-enter credentials.

Setup Process:

  • Visit developer.okta.com and sign up for a free developer account.

  • After registration, follow the prompts to create your Okta organization.

  • No installation is required as it’s cloud-based; use the web console directly.

Lab Question:

Enable Multi-Factor Authentication (?) in Okta using Okta Verify for the sample application, requiring a push notification for login.

Steps:

  1. Log into the Okta Admin Console.

  2. Configure MFA:

    • Go to Security > Authentication > Sign On.

    • Under Sign On Policy, click Add Rule.

    • Rule Name: "MFA for Sample App".

    • Conditions: Set Applications to "Sample App".

    • Actions: Select "Prompt for factor" and choose "Every time".

    • Click Create Rule.

  3. Enroll a user in MFA:

    • Go to Directory > People, select a test user.

    • Under More Actions, choose "Enroll in MFA".

    • Set up Okta Verify on the user’s mobile device.

Verification:

  • Log out and access the sample app with the test user.

  • Approve the Okta Verify push notification.

  • Confirm successful login.

Setup Notes:

  • Install Okta Verify on a mobile device.

  • Ensure the sample app is configured for SSO.

Last updated