Hello Zane Alsabery,

Thanks for posting.

The options available when setting up or changing the Single Sign-On (SSO) for an app integration depend on the access protocols supported by the app integration.

The options available from Okta side include OIDC, SAML 2.0, WS-Fed, Bookmark-only, No Sign On, SWA.

In every case, an end user can access the resources whether using Okta as IdP or going directly to the Service Provider (App) which redirects to Okta for Authentication before providing access to the service.

If you use IdP Initiated flow, then the application can be logged in by first logging in to Okta, and then selecting the SP App from the Okta Dashboard.

If you use SP Initiated flow, then then the application can be logged in by navigating to the application (either by bookmark or URL), and then when you go to login it will redirect to Okta (or use the active Okta session).

If you select both, then you have both capabilities.

To provide the users with the ability to register a new account, this document can be followed:

https://help.okta.com/eu/en-us/Content/Topics/users-groups-profiles/usgp-self-register-for-end-users.htm

Finally, to reset a password, this can be done from the Admin dashboard and there is also a self service option for end users:

https://help.okta.com/en/prod/Content/Topics/users-groups-profiles/usgp-reset-individual.htm

https://help.okta.com/en/prod/Content/Topics/users-groups-profiles/usgp-manage-password-reset.htm

https://help.okta.com/en/prod/Content/Topics/users-groups-profiles/usgp-user-password-reset.htm

Let us know if this helps you.

Daniela Chavarria.

Okta Inc.