Configure Okta as Claims Provider in SharePoint (On-Premises)
Before you begin
Complete Add SharePoint (On-Premises) in Okta.
- Ensure that the user account that has permissions to modify the SharePoint farm.
Ensure you have SharePoint Management Shell or SharePoint PowerShell snap-in to run PowerShell commands on your SharePoint Server. Add the required snap-in to an existing PowerShell prompt by entering the following the command:Add-PSSnapIn Microsoft.Sharepoint.Powershell
Start this procedure
This procedure includes the following tasks:
You can configure four attributes (Username, First Name, Last Name, and Email) for SharePoint. Wildcard matches are allowed for any prefix match of First Name, Last Name, and Email. This includes both the Okta user profile attributes and the App user profile attributes.
To configure mappings, go to.
- If you set the search scope level as OKTA and the identifier claim as userName, don't customize mappings for the app user’s username.
- If you set the search scope level as APP, don't customize mappings for an app user’s ﬁrstName/lastName/email nor leave those fields empty.
After you complete the installation procedure, Okta should appear in the Trusted Identity Provider list on the SharePoint Central Administration console.
- Go to SharePoint Central Administration > Security > Specify Authentication Providers > Default zone > Trusted Identity Provider list.
Confirm that you can see Okta in the list.
Make sure you disable the Okta Identity Provider whenever you install, uninstall, or update the Okta People Picker. See Uninstall Okta People Picker and Okta authentication.