Objective  

This article explains how to integrate Okta with ADManager Plus using SAML 2.0 to enable secure SSO. This integration allows users to log in to ADManager Plus using their Okta credentials, streamline access, improve authentication security, and reduce password-related overhead for administrators.

Prerequisites 

• You must have access to the Okta admin console.

• Ensure you have administrator privileges in ADManager Plus.

• The users should already be present in AD.

Steps to follow 

Step 1: Configure ADManager Plus in Okta

1. Log in to the Okta admin console and switch to the Classic UI.

2. Go to Applications > Create New App.

3. Choose Web as the Platform and SAML 2.0 as the Sign on method. Click Create.

4. Under General Settings, enter the application name and upload a logo (optional), then click Next.

5. Under the Configure SAML section in Okta, provide the following details by logging in to ADManager Plus > Delegation > Configuration > Logon Settings > Single Sign-On > SAML Authentication. Ensure Okta is selected as the Identity Provider, and refer to the Service Provider Detail section in ADManager Plus for the required values:

• Single sign on URL: Copy the ACS/Recipient URL from ADManager Plus.

• Audience URI (SP Entity ID): Use the Issuer URL/Entity ID from ADManager Plus.

• (Optional) Click Show Advanced Settings in Okta to configure the sign-out URL and certificate details if needed.

6. In the Feedback tab, select the appropriate option and click Finish.

7. After creation, go to the Sign On tab and find the Metadata URL. Open this URL in a new tab and save it as an XML file.

8. Go to the Assignments tab and assign users or groups. Click Done.

Step 2: Configure Okta in ADManager Plus

1. Log in to ADManager Plus.

2. Navigate to Delegation > Configuration > Logon Settings > Single Sign On.

3. Check the Enable Single Sign-on option and choose SAML Authentication.

4. Select Okta from the Identity Provider (IdP) drop-down.

5. In the SAML Config Mode, choose the Upload Metadata File option. Click Browse and upload the metadata XML file downloaded from Okta.

6. (Optional) Check:

• Sign SAML Logout Request

• Sign SAML Logout Response

7. In Mapping Attribute Selection, select userPrincipalName.

8. To enforce SAML login exclusively, check Force SAML Login.

9. Click Save to finalize the integration.

 Tips 

• If issues occur, verify that ADManager Plus and Okta have matching ACS and Entity ID values.

• Use test users before applying broadly.
  

• Confirm time sync between servers for token validity.