<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z000078dTfcCAEOkta Classic EngineSingle Sign-OnAnswered2021-09-01T02:21:14.000Z2021-08-26T22:19:18.000Z2021-09-01T02:21:14.000Z

KyleH.98518 (Customer) asked a question.

Azure AD as IdP - Okta as SP - Initiate sign on with custom vue web app managed/registered in Okta

I am fairly new to SSO and SAML so bear with me here -

 

I have successfully setup Azure AD as an external IdP using a SAML connection - it's tested and working with JIT setup to create the users I have from azure in Okta w/ their groups etc. I also have successfully registered several test custom applications in Okta (though all of them use Okta as IdP)

 

However, now I'm stuck! My goal is to have the user go to my custom vue application such as:

 

https://mycompanyapp.com

 

While at "https://mycompanyapp.com" I want to initiate the sign-in flow, which should reach out to Okta and use the Azure AD external IdP to authenticate with SAML. Then either just sign the person in to Okta, or perform the JIT operations and create the user and then sign in.

 

Lastly, I want to redirect back to my custom web app (https://mycompanyapp.com) with the token information that I need....

 

 

So in short I do not understand how to initiate the sign-in flow from the custom app to use the external azure idp i have setup in okta --- and then I do not understand how to redirect back to the custom app after authentication is completed.

 

** note I do not want to use or have users ever redirected to the Okta Dashboard

 

Much appreciation for any assistance here!

 


  • User16161645969699405309 (Vendor Management)

    Hi Kyle,

     

    This is Helen from Okta support and I am happy to can help with this question.

     

    You can make the users to land directly on the application after authenticating the users through the IdP and avoid the users to go to the Okta Dashboard by setting up a Relay State on Azure Active Directory following these instructions:

     

    1. In the Azure AD portal, select Enterprise applications. Then find and select the application you want to set up for single sign-on.
    2. In the Manage section, select Single sign-on to open the Single sign-on pane for editing.
    3. Select SAML to open the SSO configuration page. In the Relay state field enter the URL of the site you want to redirect the users to (https://mycompanyapp.com).
    Expand Post
This question is closed.
Loading
Azure AD as IdP - Okta as SP - Initiate sign on with custom vue web app managed/registered in Okta