Single Sign-On (SSO) through Okta (OIDC)

Learn how to set up Single Sign-On (SSO) with Fortify SCA through Okta.

This feature is currently only available for SCA Enterprise customers.

This article details how to configure Okta as the primary Identity Provider to facilitate SSO with Fortify SCA. For details regarding integration with other Identity Providers, see Single Sign-On (SSO).

Supported features

• Single Sign-On (OpenID Connect) initiated via Okta

• Automatic account creation in Fortify SCA on initial sign-on

Requirements

• The Okta Single Sign-On integration is only available for the Enterprise customers.

• To complete the integration, you must:

  • Have an Okta account with administrator rights.

  • Install the Fortify SCA application in your Okta instance.

Configuration

To configure your SSO integration to Okta follow the following steps:

Gather information from Okta

1. In the Okta admin page, click the Fortify SCA application.

2. Navigate to the Sign On tab.

3. Copy the values of Client ID and Client secret (you can click the eye to toggle the visibility).

4. Click OpenID Provider Metadata and open the document.

5. In the opened document, find the Issuer key and copy the URL-value.

Complete integration with Fortify SCA

To complete the integration, enter the following information:

• Issuer URL (the URL used to fetch OIDC information)

• Email Domains (the email domains which will be designated to your organization)

• Client ID (identifier of the Fortify SCA integration)

• Client secret (secret to authorize the integration, also provided when installing the integration in your IdP)

You can forward it to us by either:

• Getting in touch with the support team at [e-mail]

• Submitting the configuration data through an API endpoint at https://debricked.com/api/1.0/open/sso/oidc/request

Log into Fortify SCA using SSO

Once the integration is completed, you can log into Fortify SCA.