How do I use the Okta integration?

What is Okta?
Okta is a trusted platform to secure every identity. More than 10,000 organizations trust Okta’s software and APIs to sign in.

How does POINT integrate with Okta? 

POINT uses Okta integrations to provide quick and easy logins for organizations that already use Okta to sign on to their organization’s web platforms (such as an intranet) or accounts.

How to set up an Okta Integration: 

Accordion: Connect to your Okta account or create one

If your organization uses Okta, login here:

If you need to create an Okta account using a free trial, sign up here.

•  Fill in all fields, then click “Get started” and verify your Okta account
•  Go back to the login page, and sign in 

If you want to learn more about how to use Okta, check out this guide.

Accordion: Add Okta to POINT 

1. From your POINT admin dashboard, use the left side menu to click “Organization” and then “Integrations”. 
2. Select Okta
3. Enter in the required information, which is the Client ID and Domain. (If you don’t know how to find this, we have instructions below)
4. Click “Save” 

Accordion: Finding your Okta Client ID and Domain (SPA)

Client ID: 

1. Log in to your Okta account, choose your organization, and click the button on the top right that says “Admin” (note: make sure you have admin access from your organization). 
2. Go to the left side menu and click “Applications”, then “Applications” again from the dropdown, then click “Active.”
3. Choose “My SPA” and select the Client Credentials. 
4. Find the Client ID and copy it. Paste it in your POINT Okta Integration page under “SPA: Okta Client ID”

Domain: 

1. Log in to your Okta account, choose your organization, and click the button on the top right that says “Admin” (note: make sure you have admin access from your organization). 
2. Go to the left side menu and click “Applications”, then “Applications” again from the dropdown, then click “Active.”
3. Choose “My SPA” then choose “Sign On Tab” and click “OpenID Connect ID Token” and click “Edit”
4. Change Issuer to Okta URL and hit save
5. Copy the URL. Paste it in your POINT Okta Integration page under “SPA: Okta Domain”. 

Accordion: Finding your Okta Client ID and Domain (Native App) 

Client ID: 

1. Log in to your Okta account, choose your organization, and click the button on the top right that says “Admin” (note: make sure you have admin access from your organization). 
2. Go to the left side menu and click “Applications”, then “Applications” again from the dropdown, then click “Active.”
3. Choose “My Native App” and select the Client Credentials. 
4. Find the Client ID and copy it. Paste it in your POINT Okta Integration page under “Native App: Okta Client ID (Native App)”.

Domain: 

1. Log in to your Okta account, choose your organization, and click the button on the top right that says “Admin” (note: make sure you have admin access from your organization).
2. Go to the left side menu and click “Applications”, then “Applications” again from the dropdown, then click “Active.”
3. Choose “My Native App” and select “Sign on Tab” then “OpenID Connect ID Token” then click “Edit”.
4. Change Issuer to Okta URL and click save.
5. Copy the URL. Paste it into your POINT  Okta Integration page under “Native App: Okta Domain (Native App)”.

Accordion: Add POINT to Okta (SPA)

1. Log in to your Okta account, choose your organization, and click the button on the top right that says “Admin” (note: make sure you have admin access from your organization). 
2. Go to the left side menu and click “Applications”, then “Applications” again from the dropdown.
3. On this page, click “Create App Integration” 
4. For the sign in method click “OIDC - OpenID Connect” then when application type comes up, click “Single Page Application” and click Next. 
5. It will pull up a “New Single-Page App Integration” form. You can rename it “POINT SPA Integration” or leave that field as the default. 
6. Under “Grant type” select “Authorization code” and “Refresh token”. 
7. Under the “Sign-in redirect URIs”, click “Add URI” and enter: 

• https://dash.pointapp.org/login/callback     
• https://app.pointapp.org/login/callback 
• Note: If there is already a URI here, leave it and just add these!  

1. Under the “Sign-out redirect URIs”, click “Add URI” and enter: 
• https://dash.pointapp.org     
• https://app.pointapp.org
• Note: If there is already a URI here, leave it and just add these!  
2. Under “Assignments” and “Controlled access” click “Allow everyone in your organization to access”. You can also enable immediate access by checking that box. Click save.

Accordion: Add POINT to Okta (Native App)

1. Log in to your Okta account, choose your organization, and click the button on the top right that says “Admin” (note: make sure you have admin access from your organization). 
2. Go to the left side menu and click “Applications”, then “Applications” again from the dropdown. 
3. On this page, click “Create App Integration” 
4. For the sign in method click “OIDC - OpenID Connect” then when application type comes up, click “Native Application” and click Next. 
5. It will pull up a “New Native Application Integration” form. You can rename it “POINT Native App Integration” or leave that field as the default. 
6. Under “Grant type” select “Authorization code” and “Refresh token”. 
7. Under the “Sign-in redirect URIs”, click “Add URI” and enter: 

•  org.pointapp.point:/login
• Note: If there is already a URI here, leave it and just add these!  

1. Under the “Sign-out redirect URIs”, click “Add URI” and enter: 

• org.pointapp.point:/logout
• Note: If there is already a URI here, leave it and just add these!  

1. Under “Assignments” and “Controlled access” click “Allow everyone in your organization to access”. You can also enable immediate access by checking that box. Click save.

Accordion: Update your Okta security settings

1. Go to your your left side menu on your Okta dashboard and click “Security” 
2. In the dropdown, select “API”, then from that page click the tab that says “Trusted Origin”
3. Click “Add Origin” and enter the name “POINT App” under “Origin name”      
4.  Add the Origin URL: https://app.pointapp.org
5.  Under “Choose Type”, select “Cross-Origin Resource Sharing (CORS)” 
6.  Hit save
7. Go back to the Trusted Origin page 
8. Click “Add Origin” and enter the name “POINT Dash” under “Origin name”       
9. Add the Origin URL: https://dash.pointapp.org
10.  Under “Choose Type”, select “Cross-Origin Resource Sharing (CORS)” 
11. Click save

Accordion: Delete your Okta integration 

1. From your POINT admin dashboard, use the left side menu to click “Organization” and then “Integrations”. 
2. Select Okta
3. Click the button that says “Delete Integration” 
4. All fields should be empty

—----------------------------------UPDATED CONTENT—---------------------------------------------------------

Accordion: Add POINT to Okta (SPA)

1. Log in to your Okta account, choose your organization then go to Admin.

1. Open Applications, then Active.

1. Then click Create App Integration

1. Choose “OIDC, Single Page Application” then click Next.

1.  Set grant type refresh token

1. Scroll down to the sign-in and sign-out redirect URLs and click Add URL. 

Under the sign-in redirects, enter: 

• https://dash.pointapp.org/login/callback     
• https://app.pointapp.org/login/callback   

Under the sign-out redirects, enter: 

• https://dash.pointapp.org     
• https://app.pointapp.org

1. Scroll down to the Assignments and Allow everyone in your organization to access.

1. Click save

Accordion: Add POINT to Okta (Native App)

1. Open Applications, then click “Create App Integration” 

1. Choose “OIDC, Native Application” then click Next. 

1. Set grant type refresh token

1. Scroll down to the sign-in and sign-out redirect URLs. 

Under the sign-in redirects, enter:  

• org.pointapp.point:/login 

Under the sign-out redirects, enter: 

• org.pointapp.point:/logout

1. Allow access to be for your whole organization

1. Click save

Accordion: Update your Okta security settings

1. Open Security, then API, then Trusted Origin

1. Click “Add Origin”, enter the name POINT App.
2.  Add the Origin URL: https://app.pointapp.org
3.  Select Origin Type CORS

1. Click Save
2. Go back to the Trusted Origin page and add another
3. Click “Add Origin” and enter the name POINT Dash       
4. Add the Origin URL: https://dash.pointapp.org
5. Select Origin Type CORS
6. Click save

Accordion: Add Okta to POINT 

1. From your POINT admin dashboard, use the left side menu to click “Organization” and then “Integrations”. 
2. Select Okta

Accordion: Finding your Okta Client ID and Domain (SPA)

Client ID: 

1. Log in to your Okta account, choose your organization then go to Admin, then Applications, then Active.
2. Choose “My SPA” and select the Client Credentials. 

1. Find the Client ID and copy it. Paste it in your POINT Okta Integration page under “SPA: Okta Client ID”

Domain: 

1. Choose “My SPA” then choose “Sign On Tab” and scroll down to “OpenID Connect ID Token” and choose issuer Okta Url

1. Hit save
2. Copy the URL. Paste it in your POINT Okta Integration page under “SPA: Okta Domain”. 

Accordion: Finding your Okta Client ID and Domain (Native App) 

Client ID: 

1. Login to your Okta account, and click “Settings” then go to Admin, then Applications, then Active. 
2. Choose “My Native App” and select the Client Credentials. 
3. Find the Client ID and copy it. Paste it in your POINT Okta Integration page under “Native App: Okta Client ID (Native App)”.

Domain: 

1. Login to your Okta account, and click “Settings” then go to Admin, then Applications, then Active. 
2. Choose “My Native App” and select “Sign on Tab” then “OpenID Connect ID Token” then click “Edit”.
3. Change Issuer to Okta URL and click save.
4. Copy the URL. Paste it into your POINT  Okta Integration page under “Native App: Okta Domain (Native App)”.

Accordion: Add Okta to POINT 

From your POINT admin dashboard

1. Enter in the required information, which is the Client ID and Domain. 
2. Click “Save” 

Accordion: Delete your Okta integration 

1. From your POINT admin dashboard, use the left side menu to click “Organization” and then “Integrations”. 
2. Select Okta
3. Click the button that says “Delete Integration” 
4. All fields should be empty

 

Questions? Email us at  support@pointapp.org.