Skip to main content

Enabling Okta SSO for Swif Login (OIDC + SCIM)

Updated over a week ago

Overview

Okta SSO (Single Sign-On) enables seamless and secure access to Swif by integrating with Okta as the identity provider. This article provides steps for Swif customers to register an app on Okta and provide the necessary details to enable SSO on Swif's login page.

Swif supports two approaches for integrating Okta SSO for user login:

  1. OIDC (OpenID Connect) โ€“ the current standard method for login.

  2. SCIM with SAML โ€“ new method enabling SCIM provisioning and SSO via SAML.


Steps to Create an App on Okta (OIDC)

1. Log in to Okta

  • Go to your Okta administrator account and log in.

2. Navigate to Applications

  • In the Okta dashboard, click on Applications.

  • Select Create App Integration.

3. Choose Integration Type

  • Select OIDC - Open ID Connect as the sign-on method.

  • Choose Web Application.

4. Configure the Redirect URI

  • In the configuration settings, set the Redirect URI to:

    https://auth.swif.ai/login/callback

5. Retrieve Client Credentials

  • Once the app is created, note down the following details:

    • Client ID

    • Client Secret

    • Domain (your Okta organization URL, e.g., dev-xxxxx.okta.com).

6. Providing Information to Swif

After completing the above steps, set the Client ID, Client Secret, and Domain to Swifโ€™s Settings > Security.


Steps to Create an App on Okta (SCIM)

  1. In Okta, go to the Applications page, click Create App Integration, and select SAML 2.0.

  2. Enter a name for the app.

  3. Important: Use the connection name Swif provides in the following fields:

    • Single Sign-On URL:

      https://swifteam.us.auth0.com/login/callback?connection={{CONNECTION_NAME}}
    • Audience URI (SP Entity ID):

      urn:auth0:swifteam:{CONNECTION_NAME}

  4. Click Next, then Finish.

  5. Go to the Sign On tab and click View SAML setup instructions.

  6. Copy the Identity Provider Single Sign-On URL and download the certificate file.

  7. Send both the URL and certificate file to Swif.

Need Help?

If you encounter any issues during this process, please reach out to our support team for assistance. We're here to ensure a smooth and secure setup!

Did this answer your question?