SSO IDP - Okta

SSO IDP Configuration

To configure Okta as an Identity Provider for Foxpass, follow the steps below:

⚠️ Important: The official Foxpass application listed in the Okta Integration Network is currently configured only for the Global stack (https://console.foxpass.com). If your organization is using a non-Global stack (such as the EU stack at https://console.foxpass.eu), you will need to configure SSO using a custom SAML app in Okta instead of the default Foxpass app. When creating a Custom SAML App, make sure to use the appropriate stack-specific URLs for both: Single sign-on URL and Audience URI (SP Entity ID)
Format:
https://<your-stack-domain>/login_idp/<your-foxpass-domain>/
(e.g. https://console.foxpass.edu/login_idp/example.com/)

Configure Okta

1. Go to Okta's Admin interface.

2. From the left side, choose Applications -> Applications

3. Click "Browse App Catalog"

   

4. Search for Foxpass

   

5. Click "Add"

6. Click "Next"

7. Choose SAML2.0

8. Choose Application username format: Email

9. Choose Save

10. Choose "Assignments" Tab and assign the app to some users or groups.

    

    

11. Choose "Sign On" tab

12. Click "View SAML setup instructions", scroll down.

    

13. Note the Entity ID, something like: http://www.okta.com/xxxxxxxxxxxxxxxx

14. Note the Identity Provider Single Sign-On URL

    

15. Note the IDP Certificate

    

Configure Foxpass

1. Go to the Identity Provider settings page in the Foxpass Console.

2. Click on the "Add IDP" button, enter Okta and click Ok.

3. Enter Entity ID noted in Step 13.

   

   

4. Click 'Ok' and then click 'Configure'

5. Paste in the Certificate noted in Step 15.

6. Paste the Login URL from Step 14.

7. Logout URL is optional.

8. Click "Test Login" button to make sure configuration is correct.

9. Click “Make default” next to the Identity Provider to enable SP-initiated login.

Test it out

Now, you can go to your Okta dashboard and log in to the Foxpass Console. Note that your Okta email should match your Foxpass email.

Please reach out to us if you have any questions or feedback.