Configure Okta Org2Org SWA Applications for Password-First and Identifier-First Login Flows
Last Updated:
Overview
Configuring an Okta Org2Org application with Secure Web Authentication (SWA) enables seamless authentication to another Okta tenant by launching an application tile. The configuration steps differ depending on whether the target tenant uses a Password-first or Identifier-first login flow. The Okta Integration Network (OIN) provides a predefined application for the Password-first flow, while the Identifier-first flow requires a template application.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Okta Org2Org
- Secure Web Authentication (SWA)
- Okta Browser Plugin
Solution
Install and authenticate the Okta Browser Plugin for Secure Web Authentication (SWA) applications to function correctly.
How is the Password-First login flow configured?
Add the predefined Okta Org2Org application from the Okta Integration Network (OIN) catalog and configure the sign-on methods for the Password-first login flow.
- Navigate to Admin Console > Applications > Applications.
- Select Browse App Catalog.
- Search for and select the Okta Org2Org application.
- Select Add integration.
- Enter the login URL of the target Okta tenant in the Base URL field.
- Select the Secure Web Authentication option under Sign on methods.
How is the Identifier-First login flow configured using a template application?
Add the Template Two Page Plugin App from the OIN catalog and configure the application settings to support the Identifier-first login flow.
- Navigate to Admin Console > Applications > Applications.
- Select Browse App Catalog.
- Search for and select the Template Two Page Plugin App.
- Select Add integration.
- Configure the application with the following settings:
- Application label: Enter a descriptive name, such as "Org2Org Two Page Template Plugin app".
- Login URL:
https://<subdomain>.okta.com - Redirect URL:
https://<subdomain>.okta.com - Password page URL:
https://<subdomain>.okta.com - Username field:
input[autocomplete=username] - Next button:
input[data-type=save] - Password field:
input[type=password] - Submit button:
input[data-type=save]
- Modify the Login URL by appending
/login/defaultto the end (for example,https://<subdomain>.okta.com/login/default) if the Okta Browser Plugin does not inject the credentials after configuration.
