Integrating Okta with Qooling

Modified on Fri, 20 Nov, 2020 at 11:18 AM

Please note: at this time no preconfigured Qooling application can be found in the Okta application library. The application is therefore manually added while the official application is being verified by Okta.

Add the Qooling Application to Okta

Login to Okta
Select the Okta Applications menu item.
Click the Add Application button:

On the Add Application page, click the Create New App button:

Create a new application integration with the following settings:
Platform: Web
Sign on method: SAML 2.0

Fill in the General Settings tab:
App name: Qooling
App logo: download the logo here and upload it to Okta.

Click Next to Configure the SAML settings:
Single sign on URL: https://app.qooling.com/saml/SSO
Audience URI (SP Entity ID): https://app.qooling.com/saml/metadata

Click Next. In the Feedback settings, select the option
I'm an Okta customer adding an internal app.

Click the Finish button. The Application will be added to Okta.

Configure the Okta integration in Qooling

When configuring the Okta integration in Qooling the following screen will show up:

The required settings can be copied from the newly created Application within Okta.

Metadata URL

Open the Qooling Application within Okta. The Sign On tab provides a link to the Identity Provider metadata. Copy this link and paste it into the Metadata URL input field in Qooling:

App ID

Select the General tab in Okta. The App ID can be found within the link used to embed a login URL. Scroll down and copy the URL displayed in the EMBED LINK section:

Paste the URL into the App ID input field in Qooling. The form will automatically cut the ID from the URL.

API Token

As a last step an API token needs to be generated within Okta that allows Qooling to communicate with your Okta environment. Open the Security menu in Okta and select the API menu item. Select the Tokens menu tab:

Create a new token by clicking the Create Token button:

Name your token "Qooling API Token" and press the Create Token button. Copy the generated token value and paste it into the API Token input field in Qooling:

Press the Save button in Qooling to create the Okta connector. A confirmation screen shows up displaying the succesful creation of the connector. Users can now be assigned to the Qooling Application within Okta.

Assigning roles and groups to users

When users are assigned access to the Qooling Application they are added as limited user by default, with groups that are configured as default group in Qooling.

Roles and groups can be assigned in Okta by adding attributes to the Qooling Profile within Okta. These roles need to be configured in Qooling, and by assigning a role the account is automatically upgraded to a full account.

Adding attributes to profile

Select the Profile Editor sub-menu item from the Directory menu in Okta:

Open the Qooling profile by clicking the Profile button:

Add a new attribute to the profile by selecting the Add Attribute button:

Add and attribute of type string array with both display and variable name "roles":

Click the Save button to store the new attribute.
Repeat the process of adding an attribute for the "groups" attribute:

Assigning users to the Qooling Application

Select the Application item in the Okta menu, and open the Qooling Application.
In the Assignments tab select Assign to People:

Select the user you would like to add.
Fill in the form by adding the roles and groups available in Qooling. They are matched by title, so make sure they match exactly. For example:

Press the Save and Go Back button. The roles and groups are now updated withing Qooling.