yp64y (yp64y) asked a question.
Cisco UCCX 12.5su2 - Support for VPN less using proxy feature.
With CCX 12.5 Su2, the support for VPN less using proxy feature has been added.
With the new feature, I need the parameter ‘metaAlias=/sp’ in the URL to identify where the request is from and accordingly use the trust.
However, it appears that Okta is not adhering to this and does not allow the URL with parameters.
No other IDPs have this restriction. As it appears, this issue is currently a limitation on Okta.
Attempted workaround - uncheck "Allow this app to request other SSO URls" doesnt work.
Does anyone have any ideas?
Hi @yp64y (yp64y) , Thank you for reaching out to the Okta Community!
I have not be able to find an out-of-the-box implementation in the Okta integrations Network (OIN) catalog, so there would be not documentation on proper configuration for it. If it supports SAML 2.0, at best you would be able to attempt the configuration using the generic SAML Application Integration Wizard.
Further investigation on the Cisco side revealed that Okta is not listed as a supported IDP but it should fall under the blanket statement of "any other IdPs that comply to generic SAML 2.0 authentication as per the considerations described in the Unified CCX Solution Design Guide located at: https://www.cisco.com/c/en/us/support/customer-collaboration/unified-contact-center-express/products-implementation-design-guides-list.html. ".
I tried to dig a bit deeper into this and I could not find anything that I could vouch for besides an already existing Feature Enhancement request: https://ideas.okta.com/app/#/case/187202
As for information that may or may not be relevant and should be taken with a grain of salt, you could review the following:
https://bst.cisco.com/quickview/bug/CSCwb26567
https://stackoverflow.com/questions/68134957/how-do-i-make-okta-redirect-a-parameterized-url-correctly
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Headed to Oktane? Here's what you can expect, plus all the Okta tips you may have missed this month