How to set up Single-Sign-On (SSO) authentication for Neowit using Okta

There are two ways to set up your Okta integration, the first method uses the Okta app from Okta Integration Network, the second method is a custom Okta app, where you set up Okta manually.

Prerequisites
To activate SAML SSO with Okta you need to be admin of your organization in the Neowit platform.

Supported features
SP-initiated SSO: Enter email in the Neowit app, this will redirect you to Okta to authenticate, on success, Okta will redirect you back to the Neowit app.

Configuration
When setting up the Neowit app in Okta, you will be prompted to enter an Entity Id for the authentication method in the Neowit platform.

As an admin of your organization in Neowit, open Settings -> Authentication and create a new authentication method. This will present you with Service Provider settings. The Entity Id required in Okta is the random string in the URL https://app.neowit.io/api/auth/<entity_id>/asml/acs. Copy only the entity id part of the URL into the Okta prompt.

In your Okta Admin Console, select the Sign on tab for the Neowit SAML app, then copy the SAML metadata URL, you need to upload the content of this URL to Neowit. For example, you can open the URL in the browser, view the source and copy it to a file that you upload.

Next, click save and our SAML configuration for Neowit is complete. You can start assigning people to the app.

Note: If you aren't using SCIM to import your Okta users, you will have to make sure the Neowit user is set up to use your Okta IdP as authentication method (you can do this under settings/user). Also make sure the Name field (displayName) is the same as in the Okta directory.