<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008G7VYySANOkta Classic EngineAdministrationAnswered2024-04-30T09:18:25.000Z2018-04-16T15:51:15.000Z2018-07-27T17:57:28.000Z

soy4p (soy4p) asked a question.

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:20 AM
Can I use OKTA as a relying party trust from another IDP ?
Here is my use case...

We are a software vendor, we already have an IDP system for SSO (not OKTA), which can have local users account, or SAML off to corporate AD to allow windows credential sign-in.

We now have a customer that is already using OKTA, linked to their AD and we need to comply with this.

 

Question is, can I setup a SAML relying party trust to OKTA from my existing IDP, as if it were just another AD type service ? This would mean I don't need to make coding changes and its just config.

The route would then be:

1. Request from our software to our IDP

2. IDP uses relying party trust to OKTA instance

3. However that OKTA instance is configured (i.e to corporate AD) is then used for auth

4. Back to beginning and we get claims based responses

 

Thankyou
  • 2 answers
  • 2.12K views

  • silviu.muraru1.494609885910873E12 (Okta, Inc.)

    Hi,

     

    My name is Silviu and I am a Technical Support Engineer (Tier II) at Okta.

    This might be a Dev-related subject so opening a case with Okta Support would be the best solution I think, but still, you might be referring to the following two pieces of documentation:

    1. Setting Okta as some sort of SP, getting requests and users from another IDP, which is the Inbound SAML Configuration here:

    https://support.okta.com/help/Documentation/Knowledge_Article/40561903-Configuring-Inbound-SAML

    2. Having Okta as an authorization server and configuring scopes, claims, etc.. Docs here:

    http://​https://developer.okta.com/authentication-guide/implementing-authentication/set-up-authz-server

    For any further assistance please open up a case with Okta Support and get all the necessary pieces of information, if not provided yet.

     

    Wish you all the best in your work!

     

    Thanks,

    Silviu Muraru

    Technical Support Engineer | Okta
    Expand Post

  • j5v7c (j5v7c)

    Hello David,

     

    Thanks for posting your inquiry in Okta Community Portal.

     

    If you receive a great answer to your question(s), please help readers find it by marking it the best answer. Hover over the answer and click "Best Answer." 

     

    Thank you,

     

    Dylann Fezeu

    Okta Help Center Team
    Expand Post
This question is closed.
Loading
Can I use OKTA as a relying party trust from another IDP ?