IAM Lab

Product Chosen: Okta Lab Task: Configure Single Sign-On (SSO) for a sample application.

Lab Question:

Set up Okta to enable SSO for a sample application, allowing a user to log in seamlessly using their Okta credentials.

Answer (Steps):

1. Sign up for a free Okta developer account at developer.okta.com.

2. Log into the Okta Admin Console with your credentials.

3. Add a new application:

   • Go to Applications > Applications and click Create App Integration.

   • Select SAML 2.0 (or OpenID Connect if preferred) and click Next.

   • App Name: "Sample App"

   • Click Next and configure basic SAML settings (e.g., Single Sign-On URL and Audience URI can use dummy values like http://localhost for testing).

   • Click Finish.

4. Assign the application:

   • Go to Applications > Sample App > Assignments.

   • Click Assign and select a user or group (e.g., yourself), then save.

5. Test the SSO:

   • Log out, then access the Okta dashboard as the assigned user.

   • Click the "Sample App" tile to verify SSO redirection.

Verification:

• When you click the app tile, you should be redirected to the application (or a test page) without needing to re-enter credentials.

Setup Process:

• Visit developer.okta.com and sign up for a free developer account.
• After registration, follow the prompts to create your Okta organization.

• No installation is required as it’s cloud-based; use the web console directly.

Lab Question:

Enable Multi-Factor Authentication (?) in Okta using Okta Verify for the sample application, requiring a push notification for login.

Steps:

1. Log into the Okta Admin Console.

2. Configure MFA:

   • Go to Security > Authentication > Sign On.

   • Under Sign On Policy, click Add Rule.

   • Rule Name: "MFA for Sample App".

   • Conditions: Set Applications to "Sample App".

   • Actions: Select "Prompt for factor" and choose "Every time".

   • Click Create Rule.

3. Enroll a user in MFA:

   • Go to Directory > People, select a test user.

   • Under More Actions, choose "Enroll in MFA".

   • Set up Okta Verify on the user’s mobile device.

Verification:

• Log out and access the sample app with the test user.

• Approve the Okta Verify push notification.

• Confirm successful login.

Setup Notes:

• Install Okta Verify on a mobile device.

• Ensure the sample app is configured for SSO.