
qt2le (qt2le) asked a question.
Hello,
Currently we are checking functionality that Okta provides.What we are trying to achieve: make it possible for users from one Okta organization to access the application in another Okta organization. I assume that Okta Org2Org is exactaly the way to go, so I use this article https://saml-doc.okta.com/SAML_Docs/Configure-SAML-2.0-for-Org2Org.html for configuration.
We have two Okta developer organizations. In first (Hub) organization we have a simple SAML application built using this article https://developer.okta.com/blog/2017/03/16/spring-boot-saml. In second (Spoke) organization I was trying to follow the steps to achieve the connection between organizations.
I was able to execute most of the steps, however I have problems setting up value for URL in Bookmark App. In the article it specifies that I should use value of Okta Org Admin URL field from application on Hub organization as value for RelayState parameter. But I don't have this Okta Org Admin URL field in the App Embed Link section.
Current value of Embed Link field doesn't seem to work for me. When I click on Org2Org app from UserHome screen I have 400 Error (Error Code: GENERAL_NONSUCCESS), when I click on Bookmark App I'm redirected to my app, but I'm not able to login as user from Spoke org, only credentials from Hub org work.Could you please let me know if I'm doing something wrong?
Is what we are trying to achieve even possible?
It would be great to have a simple working example of Org2Org integration before we include Okta on our production environment.Your help will be really appreciated.
Best Regards,Stanislav