1.The login for your Users in the LMS (User_Identifier in the import sheet) MUST match their Okta Username.

2.See the configuration details below: Configure Okta with OpenID for Intellek LMS v4 and Configure Okta with OpenID for Intellek LMS v3.

3.Once configured, contact Intellek Support (support@Intellek.io) with the following information from your Okta portal.

•Client ID

•Client secret for the above application

•Okta Domain e.g. https://{{okta account name }}.okta.com

Intellek will configure your LMS instance with the above settings.

Configuring Okta for LMS v4 involves creating a Single-page app which differs from the Web application method used in LMS v3. Use the following steps as a guide to setting it up.

1.In the Okta Admin Console, go to Applications > Applications.

2.Select Create App Integration.

3.In the Create a new app integration dialogue, select Sign-in method OIDC – OpenID Connect and choose Application type of Single-Page Application and click Next.

4.Enter the information in the New Single-Page App Integration as follows:

a.Enter an App integration name.

b.Upload a logo as desired.

c.Set Grant Type:

i.Authorization Code

ii.Refresh Token

iii.Other grants > Implicit (hybrid)

d.Specify the Sign-in redirect URI. Redirect URIs will be https://[Intellek_LMS_URL]/authentication/sso/okta-callback where [Intellek_LMS_URL] is your LMS URL.

Note: We require testing OKTA SSO in a test environment prior to making the switch to your live site. First add your test site URI in the field provided for testing. You can add your live site URI in the 'Add URI' area or once your test site has been tested, you can change the primary URI to your live site URI.

e.Assignments:

i.Controlled access: Allow everyone in your organization to access.

ii.Enable immediate access with Federation Boker Mode.

5.Save the Single-Page App information.

6.Once the application has been created you will be provided with credentials for your SPA.

Client Credentials:

a.Client ID

b.Client secret

c.Okta domain

Note: Existing clients who will be migrated to LMS v4 will need to send their SPA application details before the migration to Intellek support (support@intellek.io) so the migration to LMS v4 can be completed.

7.As information changes, Administrators can update the Okta SSO configuration details within their LMS instance. See the following references:

1.From the Okta dashboard select Applications > Create App Integration.

2.In the Create a new app integration dialogue, select OIDC - OpenID Connect and Web Application, then click the NEXT button.
(Note: These instructions are for LMS v3. For LMS v4, see SSO Callback Configuration LMS v4 .)

3.Complete the General Settings

oFill in the App integration name.

oUpload a logo as desired.

oEnsure Implicit (hybrid) is checked.

oSpecify the Sign-in redirect URI. Redirect URIs will be https://[Intellek_LMS_URL]/authorization-code/callback where [Intellek_LMS_URL] is your LMS url.

▪Note: We require testing OKTA SSO in a test environment prior to making the switch to your live site. First add your test site URI in the field provided for testing. You can add your live site URI in the "Add URI" area or once your test site has been tested, you can change the primary URI to your live site URI.

oSelect who will have access to the application in the Assignments section as required

oClick Save

4.Once the application has been created you will be able to access the following which you will need to send to the Intellek support team (support@intellek.io) in order for us to update the application configuration.

oClient ID

oClient secret

oOkta domain.

5.Confirm the application is set up correctly:

oApplication type: Web

oGrant Type: Client acting on behalf of a user (ensure the following are checked)

▪Authorization Code

▪Implicit (hybrid)

•Allow ID token with implicit grant type

•Allow Access token with implicit grant type