<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008C3jiYSAROkta Classic EngineOkta Integration NetworkAnswered2025-03-10T09:02:44.000Z2016-07-22T22:09:56.000Z2018-02-22T17:14:04.000Z

  • AndrewT.35375 (San Jose State University)

    I'm not at all worried about the Okta side, I've set up other apps in my dev environment, including WebEx Messenger (Jabber).

     

    But, based on how OnBase is documented (starting at page 32 of the OnBase 15 SSO configuration guide: https://drive.google.com/a/sjsu.edu/file/d/0B--WfedZUNdAWHZuZ0lvUmV5Um9qU3hLSm5PLVBIYWhuTjV3/view?usp=sharing (https://drive.google.com/a/sjsu.edu/file/d/0B--WfedZUNdAWHZuZ0lvUmV5Um9qU3hLSm5PLVBYWhuTjV3/view?usp=sharing) ) I'm really wondering if they're speaking a totally different language, or if they're just asking for information that's not inlcuded in the Okta SAML2 documentation.

     

    I would love it if you could take a peek at their doc and tell me if I'm an idiot or if it actually is totally unhelpful.

    Expand Post

  • 6iga1 (6iga1)

    Andy, any progress on your end?  I'm working with Hyland now for OnBase IDP-initiated auth and I'm running into the same issues of seeming to speak two different languages.  A dev from Hyland and I are actively trying to implement and I've asked for them to provide me an example of a working SAML response to compare with what I'm sending on my end.  Have you had any luck?

  • 6iga1 (6iga1)

    So to anyone else who may be trying to integrate OnBase, here is what we did to make this work as an Okta SAML app.  Hyland should be aware of this as well, and you may need a bit more trial and error, but this worked for us:

     

    1. OnBase's SAML utility defauts SAMLTokenName to a value of "SAMLToken".  This value should be "SAMLResponse".

    2. UsernameClaimType value is defaulted to "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name".  We left this default and created an attribute statement of that name, with a name format of unspecified and a value that mapped to our uid used for Okta login (for us this was user.employeeNumber).  I think if I do it again, I would want this attribute statement name to be something more like an urn:oid or perhaps just an aggreed upon name between Hyland and us, as Hyland can change the name to match with their utility/config file also.  I'm just not used to the terminology/definitions used Hyland but it probabably doesn't matter much.

    3. We filled in Audience Restriction but found that by default the Hyland SP was set to ignore ("ValidationMode" value "Never") so the value wasn't doing anything.  We did have them turn it on, and both used an agreed upon value for it.  I even purposly changed this value during testing to see what would happen and it did fail if the values didn't agree, so the Hyland SP is honoring it.

    4. We also had to change the value on the Hyland SP side to "True" for the key "Base64Encoded" since it defaults to "False".

     

    Once we did this, Hyland OnBase started logging in correctly via SSO.  We were sucessful with logging in both new OnBase users and users already created previously.
    Expand Post

  • b4vy3 (b4vy3)

    I am having trouble getting our OnBase SSO connection to work.  Could you let me know general URLs yuou used for "Single Sign-On URL" and "Entity ID".  

     

    I was also a bit confused by step 2 above.  Are you saying you set "Attribute Statements" -> Name = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name", and then had Value = user.employeeNumber ?
    Expand Post
This question is closed.
Loading
Has anyone used Okta with Hyland OnBase?