<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008G7UhuSAFOkta Classic EngineOkta Integration NetworkAnswered2024-03-25T05:19:51.000Z2018-07-18T10:48:09.000Z2018-08-12T04:15:04.000Z
Okta Org2Org configuration

Hello,

 

Currently we are checking functionality that Okta provides.

 

What we are trying to achieve: make it possible for users from one Okta organization to access the application in another Okta organization. I assume that Okta Org2Org is exactaly the way to go, so I use this article https://saml-doc.okta.com/SAML_Docs/Configure-SAML-2.0-for-Org2Org.html for configuration.

 

We have two Okta developer organizations. In first (Hub) organization we have a simple SAML application built using this article https://developer.okta.com/blog/2017/03/16/spring-boot-saml. In second (Spoke) organization I was trying to follow the steps to achieve the connection between organizations.

 

I was able to execute most of the steps, however I have problems setting up value for URL in Bookmark App. In the article it specifies that I should use value of Okta Org Admin URL field from application on Hub organization as value for RelayState parameter. But I don't have this Okta Org Admin URL field in the App Embed Link section.

 

Current value of Embed Link field doesn't seem to work for me. When I click on Org2Org app from UserHome screen I have 400 Error (Error Code: GENERAL_NONSUCCESS), when I click on Bookmark App I'm redirected to my app, but I'm not able to login as user from Spoke org, only credentials from Hub org work.

 

Could you please let me know if I'm doing something wrong?

 

Is what we are trying to achieve even possible?

It would be great to have a simple working example of Org2Org integration before we include Okta on our production environment.

 

Your help will be really appreciated.

 

Best Regards,

Stanislav 

 


  • Hi Stanislav,

     

    Unfortunately you’ll have to reconfigure both your orgs to match up.

    First step is to configure your Target org. Add identity provider here and populate the URLs from Org2Org app (View setup instruction) in your Spoke org.

    Next step is Add an app (what app you want) in your Target org that you will access it thru your Spoke org.

    Final step is to add the bookmark app in your spoke Org to access your app in target org. In the bookmark app URL you should have:

    <IdP Single Sign On URL >?RelayState= <Embed Link of the app added in your target org> .

     

    If you have difficulties setting this up please open a ticket with Okta Support.

     

    Regards,

    Tavi Parvulescu

    Technical Support Engineer

    Okta Global Customer Care
    Expand Post
    Selected as Best
  • Hi Stanislav,

     

    Unfortunately you’ll have to reconfigure both your orgs to match up.

    First step is to configure your Target org. Add identity provider here and populate the URLs from Org2Org app (View setup instruction) in your Spoke org.

    Next step is Add an app (what app you want) in your Target org that you will access it thru your Spoke org.

    Final step is to add the bookmark app in your spoke Org to access your app in target org. In the bookmark app URL you should have:

    <IdP Single Sign On URL >?RelayState= <Embed Link of the app added in your target org> .

     

    If you have difficulties setting this up please open a ticket with Okta Support.

     

    Regards,

    Tavi Parvulescu

    Technical Support Engineer

    Okta Global Customer Care
    Expand Post
    Selected as Best
  • qt2le (qt2le)

    Thank you very much Tavi!

     

    After your comment I got it running.

     

    Best Regards,

    Stanislav
This question is closed.
Loading
Okta Org2Org configuration