Search results

Okta support for SSO authentication

Bold BI application supports adding users using the Okta provider. By importing them, you can share the dashboards and email exported dashboards with them.

NOTE: This feature is available in Bold BI Embedded Analytics but not in Cloud Analytics Server.

How to register the Bold BI application in Okta

This section explains how to perform Single Sign-On for users in Okta with Bold BI application.

NOTE: This configuration has to be done in Okta website.

Prerequisites

  • An admin account in Okta.
  • Install Bold BI application.

Steps to register the Bold BI application

  1. Login to the Okta website with an admin account.

    Admin page

  2. Click Applications in the header menu.

    Application page

  3. Click Add Application button.

    Add Application

  4. Click web and proceed with Next.

    Application type

  5. Fill in the following application details in the next page and click Done.

    • Name
    • Login Redirect URIs
    • Logout Redirect URIs

    Application details

  6. The Login redirect URIs must be the URI in the settings of your Bold BI application as in the following snap.

    Redirect URI

  7. In the next page, you will get the Client ID and Client Secret at the bottom of the page along with the other details you filled in the previous page.

    Client details

After successful registration in Okta, save these settings in Bold BI settings page to enable this authentication.

Enable Okta support for authentication in Bold BI

Configure the settings in Bold BI as in the following snap to enable the authentication using Okta.

Okta settings

The fields to be saved in the Bold BI to enable the Okta for authentication is explained as follows.

Provider Name It represents the name of the authentication provider to be displayed in the login page.
Provider Logo It represents the logo of the authentication provider to be displayed in the login .
Authorization Endpoint It should be in the format ${baseUrl}/v1/authorize
Please refer here for more details.
Token Endpoint Method POST
Token Endpoint It should be in the format ${baseUrl}/v1/token
Please refer here for more details.
User Information Endpoint Method POST
User Information Endpoint It should be in the format ${baseUrl}/v1/token
Please refer here for more details.
Client ID The Client ID you get after registered the Bold BI application in Okta website.
Client Secret The Client Secret you get after registered the Bold BI application in Okta website.
Scopes openid, profile, email
Logout Endpoint It is the endpoint in the Okta website that signs the user out.
Email This must be the field name in which email will be present when deserializing the token.

Configure Okta Group Import Settings in Bold BI

Configure group import setting in Bold BI using Okta as shown in the below image.

Okta Group

Generate an API token by following the below link, https://developer.okta.com/docs/guides/create-an-api-token/create-the-token