Okta Integration

This guide explains how to set up SSO login to the WhaTap monitoring service using Okta as the Identity Provider (IdP). You can log in to the WhaTap service with your Okta account and use the service within the assigned permissions.

Note

• An Okta account is required for WhaTap login integration.
• For more information about Okta, see the Okta official website.

Prerequisites

Complete the following before starting the Okta integration.

• Generate an SSO key from WhaTap: Copy the EntityID and Sign-On URL values.

Creating an Okta app and configuring SAML

1. Log in to the Okta Admin page.

2. Go to Applications > Applications.

3. Click the Create App Integration button.

4. Select SAML 2.0 and then click Next.

5. Enter the App name and then click Next.

6. Enter the SAML Settings > General items.

   

   • Single sign-on URL: Enter the Sign-On URL value copied from WhaTap.
   • Audience URI (SP Entity ID): Enter the EntityID value copied from WhaTap.
   • Application username: Select Email.

7. In Attribute Statements, enter email in Name and select user.email in Value.

   

8. Click Next.

9. Select This is an internal app that we have created and then click Finish.

Copying Okta metadata

1. On the Okta Admin page, go to Applications > Applications.

2. Select the Sign On tab.

3. In Metadata URL, click the Copy button.

   

4. Register the copied metadata URL following the WhaTap External IdP registration procedure.

Assigning users

1. On the Okta Admin page, go to Applications > Applications.

2. Select the previously created application.

3. Select the Assignments tab.

4. Click the Assign button and then select Assign to People or Assign to Groups.

   

5. Select the users to assign and click the Assign button.

   

6. Click the Save and Go Back button.

   

7. Click the Done button.

   

Verifying the integration

1. On the Okta Admin page, go to the General tab of the previously created application.

2. In the App Embed Link section, copy the Embed Link URL.

   

3. Navigate to the copied URL in your web browser.

4. Verify that the WhaTap monitoring service screen appears. If the screen appears, the integration is complete.

Note

• During the initial SSO integration, if the email account already exists in WhaTap, link information registration is automatically performed through password authentication.
• If the email account does not exist in WhaTap, membership registration and link information registration are automatically processed after entering the required information.