Configuring Okta for LMS v4 requires creating a Single-Page Application (SPA), which differs from the Web Application method used in LMS v3.

Clients upgrading to LMS v4 and using Okta must add the new LMS v4 callback URL provided by Intellek to their OKTA application to ensure proper functionality after the upgrade is complete.

In addition, the LMS v4 callback URL must be added to the Trusted Sites security zone and Pop-up Blocker exception lists.

Use the following steps as a guide to setting up Okta for LMS v4.

Create the Application

1.Log in to the Okta Admin Console.

2.Navigate to Applications > Applications, then click Create App Integration.

3.Select OIDC – OpenID Connect as the Sign-in method.

4.Choose Single-Page Application as the application type.

5.Click Next.

Configure General Settings

1.Complete the application settings:  

•App integration name - Enter a name for the application. This is the name displayed in Okta.

•Logo - Upload a logo if desired.

•Grant Types - Enable the following:

oAuthorization code

oRefresh Token

oAdvanced > Other Grants > Implicit (Hybrid)

•Sign-in Redirect URIs - Enter the following URI (callback URL provided by Intellek): https://[Intellek_LMS_URL]/authentication/sso/okta-callback (Replace [Intellek_LMS_URL] with your LMS URL)

Note: For new clients or LMS implementations, Intellek recommends testing OKTA SSO in a test environment before enabling it on your production site. First, enter the test site URI provided by Intellek. You may add the production URI using Add URI, or update the primary URI after testing has been completed successfully.  

•Controlled Access - Select whether the application is available to all users or only assigned users/groups:

oTo allow organization-wide access, select Allow everyone in your organization access.

•Federation Broker Mode - Enable if required for your environment.

2.Click Save.

Obtain Application Credentials

3.After the application has been created, open the application page and record the following values:  

•Client Name

•Client ID

•Username Property name

Configure LMS SSO Settings

Once the application has been created, use the values above to configure or update the Okta SSO settings in your LMS instance. For LMS v4 see Configuring Authentication Methods.

1.From the Okta dashboard select Applications > Create App Integration.

2.In the Create a new app integration dialogue, select OIDC - OpenID Connect and Web Application, then click the NEXT button.
(Note: These instructions are for LMS v3. For LMS v4, see SSO Callback Configuration LMS v4 .)

3.Complete the General Settings

oFill in the App integration name.

oUpload a logo as desired.

oEnsure Implicit (hybrid) is checked.

oSpecify the Sign-in redirect URI. Redirect URIs will be https://[Intellek_LMS_URL]/authorization-code/callback where [Intellek_LMS_URL] is your LMS url.

▪Note: We require testing OKTA SSO in a test environment prior to making the switch to your live site. First add your test site URI in the field provided for testing. You can add your live site URI in the "Add URI" area or once your test site has been tested, you can change the primary URI to your live site URI.

oSelect who will have access to the application in the Assignments section as required

oClick Save

4.Once the application has been created you will be able to access the following which you will need to send to the Intellek support team ([email protected]) in order for us to update the application configuration.

oClient ID

oClient secret

oOkta domain.

5.Confirm the application is set up correctly:

oApplication type: Web

oGrant Type: Client acting on behalf of a user (ensure the following are checked)

▪Authorization Code

▪Implicit (hybrid)

•Allow ID token with implicit grant type

•Allow Access token with implicit grant type