In order to follow this guide, you must have an administrator account within your Oak site, and be able to manage applications within Okta.
Supported features
SP-initiated SSO
IdP-initiated SSO
For more information on the listed features, visit the Okta Glossary.
Configuration steps
In Okta's Admin Console, navigate to the Applications section and then select Browse Application Catalog. Search for Oak Engage and add the integration.
Under Sign-on options, select SAML 2.0 and copy the Metadata URL from the Metadata details section. Navigate to the copied URL within a new browser tab which should download an .xml file called the SAML metadata.
Save the metadata .xml file to your computer for later.
Sign in to Oak Engage with your administrator account.
Navigate to the connection settings page (Primary Menu > Configure > Site Settings > Connections).
Click on Browse Library and locate the Okta Identity Provider (SAML) connection.
Click on Import SAML metadata, and then browse to, and upload the metadata file you previously saved to your PC.
Verify that the connection is created.
The SAML configuration is now complete in Oak Engage.
Service Provider Initiated SSO
The sign-in process is typically initiated from Oak Engage (the Service Provider).
From your browser, navigate to your Oak sign-in page.
Click on the Sign in with Okta button.†
Enter your Okta user credentials (your email and password) and click Sign in with Okta. If your credentials are valid, you will be redirected to Oak Engage and will be signed in.
† There are several mechanisms that allow you to configure your user's sign-in experience, including "automatic sign-in" that automatically takes users through the Okta SSO process. Contact your Oak Engage account manager, or our support team for more information on the options available.
Troubleshoot
If you receive any errors during SAML SSO or need any assistance with configuration, contact your Oak Engage account manager, or our support team who will be happy to help.