Okta SSO Integration

SSO integrations are available by contacting Ubiq support. These enterprise configurations allow for SSO to the Ubiq UI using common enterprise IDP or IAM solutions. This guide is specific to setting up SSO using Okta.

User access

After SSO integration, user access to Ubiq still requires that the user is invited to the Ubiq account from the Ubiq "Teams" feature. Setting up SSO will not give all users in the Okta tenant access to Ubiq. It will force all users attempt to login to Ubiq using an email from the tenant domain (i.e. [email protected]) to instead log in via your Okta.

Setup

Setup requires administering your Okta tenant to create an application that is used for the SSO.

Register a Web Application in Okta, following the Okta documentation here: https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_oidc.htm
Set the Redirect URI in the Application to https://login.ubiqsecurity.com/login/callback
Generate a Client Secret using Okta’s documentation (per documentation link in step 1)

Once the Okta Application is set up, you'll need to provide this information to Ubiq support to configure the SSO on the Ubiq side:

Okta Domain (i.e. yourcompany.okta.com)
Client ID
Client Secret