Joomla OAuth Client Integration with Okta Single Sign-On (SSO)

Overview

Set up Single Sign-On (SSO) on your Joomla site via Okta OAuth provider with the help of Joomla OAuth & OpenID Connect plugin. Integrating Okta Single Sign-On (SSO) into Joomla using OAuth 2.0 authentication protocol allows your users to securely login into your Joomla websites and applications by authenticating with Okta OAuth provider. The Okta OAuth Joomla plugin also provides advanced features such as, Auto create users, Attribute Mapping, Group Mapping etc. Visit our Joomla OAuth Client Plugin page to learn more about the features and pricing plans we offer for the Joomla OAuth Single Sign-on (OAuth & OpenID connect) plugin.

Configuration Steps

In this configuration, Okta functions as the OAuth server, while Joomla allows users to log in with their Okta credentials by utilizing the Joomla OAuth Client Plugin.

Step 2: Configure Okta as OAuth Server

• Log into your Okta Dashboard.
• Go to the Okta Admin panel. Go to Applications -> Applications.

• You will get the following screen. Click on Create App Integration button.

• Select Sign in method as the OIDC - OpenID Connect option and select Application type as Web application, click on Next button.

• You will be redirected to the app details page. Enter App integration name and Sign-in redirect URIs which we copied as Callback/Redirect URL.

• Scroll down and you will see the Assignments section. Select an option for controlled access as Allow everyone in your organization to access, untick the Enable immediate access with Federation Broker Mode and then click on Save button.

Step 3: Configure Client ID & Secret

• Now you will get the Client ID and Client Secret. Keep these credentials handy for configuring miniOrange OAuth Client Single Sign-On (SSO) plugin.

• From right top header, you will get your domain name. Keep the domain name handy.

• Go back to your Joomla Dashboard. Then go to Step 2 in the Configure OAuth tab.
• Paste the Client ID, Client Secret and Domain. Also Set Client Credentials In Header or Body Only then click on Save Settings. Once Settings are saved then click on Save Configuration.

• Scope & Endpoints are given below, which are required for configuring Joomla as OAuth Client plugin to configure Okta as a custom OAuth or OIDC provider.

Scope	openid email
Authorize Endpoint	https://{yourOktaDomain}.com/oauth2/default/v1/authorize
Access Token Endpoint	https://{yourOktaDomain}.com/oauth2/default/v1/token
Get User Info Endpoint	https://{yourOktaDomain}.com/oauth2/default/v1/userinfo
Custom redirect URL after logout:[optional]	https://{yourdomain.okta}.com/login/signout?fromURI=<your url>
Set Client Credentials	In Header or Body Only
Discovery URL (To see configuration values)	https://{your-okta-domain}/oauth2/default/.well-known/openid-configuration