Okta SSO
Introduction
Okta provides secure identity management and single sign-on to applications that you can add to your Okta account. From Okta, you and your users can log in to Okta and then access applications such as Paradime without having to log in to each application.
Organizations can use Okta OIDC to connect Paradime to their Okta instance. This page describes how to add configure the Okta connection for Paradime.
Creating an Okta OIDC Application
To connect your Okta tenant as an identity Provider in Auth0, you must create an OIDC application. In your Okta Admin Dashboard, create a new application. Select Applications > Applications, and Create App Integration.
Choose App Integration Select Create New App. Choose OIDC as the Sign-in method. Choose Web Application as your Application Type. Select Next.
Create new OIDC app Enter your App integration name as Paradime. Add as the callback URL in the Sign-in redirect URIs field the following URL depending on your region as follows: US 🇺🇸:
https://auth.us.paradime.io/login/callback
EU 🇪🇺:https://auth.paradime.io/login/callback
Click SaveChoose app integration settings Once the Paradime app is created, find your Client ID and Client Secret fields.
Capture the Client ID and Secret Share your Okta Domain, Client ID and Client Secret securely with support@paradime.io using a Password Manager like Dashlane or 1Password.
For security reasons like preventing man-in-the-middle attacks, Paradime only allows authentication from the Service Provider i.e. we don’t allow IdP initiated logins. To create an experience where your users can still click on the app in Okta, we recommend the following:
Once you have created the Paradime app, make it hidden so no user can access it.
Create a bookmark app (instructions here) in Okta and point the app to
https://app.paradime.io
this way the user will always be directed to the Paradime login screen and will then use the Okta SSO to finally login to Paradime
Once you have shared the details, Paradime will setup the Okta connection and then users in your organisation will see a
**Continue with Okta**
button during login and once they click the Okta option they will go through your Okta MFA Authentication process and will be able to login to Paradime.
![](https://docs.paradime.io/~gitbook/image?url=https%3A%2F%2F2337193041-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FHET0AD04uHMgdeLAjptq%252Fuploads%252FmWcyhuxc7VElREQ5sOxO%252Fokta-login-with-okta.png%3Falt%3Dmedia%26token%3D04d9f807-a04d-4971-a220-1b8fb2bd5b92&width=768&dpr=4&quality=100&sign=655589c4&sv=1)
Make sure you add all the users who need access to Paradime either individually or as a group added to the Paradime app in Okta.
If you already have an existing Google SSO setup, then using the Okta option, Paradime will automatically link your accounts and once account is linked Paradime will ask you to login again and you can then use Okta for all future logins.
Last updated