Bold BI application supports adding users using the Okta provider. By importing them, you can share the dashboards and email exported dashboards with them.
NOTE: This feature is available in Bold BI Embedded Analytics but not in Cloud Analytics Server.
This section explains how to perform Single Sign-On for users in Okta with Bold BI application.
NOTE: This configuration has to be done in Okta website.
Login to the Okta website with an admin account.
Click Applications
in the header menu.
Click Add Application
button.
Click web
and proceed with Next
.
Fill in the following application details in the next page and click Done
.
The Login redirect URIs
must be the URI in the settings of your Bold BI application as in the following snap.
In the next page, you will get the Client ID
and Client Secret
at the bottom of the page along with the other details you filled in the previous page.
After successful registration in Okta, save these settings in Bold BI settings page to enable this authentication.
Configure the settings in Bold BI as in the following snap to enable the authentication using Okta.
The fields to be saved in the Bold BI to enable the Okta for authentication is explained as follows.
Provider Name | It represents the name of the authentication provider to be displayed in the login page. |
Provider Logo | It represents the logo of the authentication provider to be displayed in the login . |
Authorization Endpoint | It should be in the format ${baseUrl}/v1/authorize Please refer here for more details. |
Token Endpoint Method | POST |
Token Endpoint | It should be in the format ${baseUrl}/v1/token Please refer here for more details. |
User Information Endpoint Method | POST |
User Information Endpoint | It should be in the format ${baseUrl}/v1/token Please refer here for more details. |
Client ID | The Client ID you get after registered the Bold BI application in Okta website. |
Client Secret | The Client Secret you get after registered the Bold BI application in Okta website. |
Scopes | openid, profile, email |
Logout Endpoint | It is the endpoint in the Okta website that signs the user out. |
This must be the field name in which email will be present when deserializing the token. |
Configure group import setting in Bold BI using Okta as shown in the below image.
Generate an API token by following the below link, https://developer.okta.com/docs/guides/create-an-api-token/create-the-token