Add an Okta Auth Module

An Okta Auth Module can be used to add a secondary authentication relationship between Access Gateway and a secondary Okta org.

Info

Note

An Okta Auth Module requires a defined trust relationship between the Access Gateway instance and the Okta tenant.

To define a trust relationship within Okta with the Access Gateway instance:

  1. In your browser, navigate to your Okta org and sign in as an administrator.
  2. Select Security > API.
  3. Select the Trusted Origins tab.
  4. Click Add Origin.
  5. In the Add Origin dialog box specify:

    Field

    Value

    Name

    Meaningful name, such as Trusted Origin for Access Gateway.

    Origin URL

    URL for Access Gateway instance, such as https://gateway.tld

    Type

    Redirect.

  6. Click Add.


  1. Sign in to the Access Gateway Admin UI console
  2. Add an Auth Module as described in Add an Auth Module and select Okta.

  3. Enter the following details:
    FieldDescriptionExample
    NameName used to identify the Auth ModuleOkta AM

    Short Name

    A shortened identify for this Auth Module

    Auto-generated.

    Okta Org

    your Okta org

    myorg.oktapreview.com

    Attributes

    A list of attributes returned from Okta and available to Access Gateway application

    login, firstName, lastName, email.

    Description

    Optional. Enter description

    Local Auth Module

  4. Click Not Validated () when complete. Okta Access Gateway validates the connection.
    If the validation is successful, the button changes to Valid ().
  5. Click Okay.