This guide walks you through configuring Okta single sign-on (SSO) for Nooks, so people in your organization can sign in using their Okta-managed credentials.

Prerequisites

Before you begin, make sure you have:

• Access to Okta admin console

Supported Features

Service Provider (SP)-initiated SSO: Users start the sign-in process from the Nooks login page and choose to sign in via SSO.

Configuration Steps

Follow the steps below to connect Okta as your identity provider for Nooks.

1. Open the Okta dashboard, navigate to Applications → Applications and press the Browse App Catalog.

2. Search for Nooks in the App Catalog search bar, open the its page, and click Add Integration.

3. Complete the integration steps, which will take you to the Assignments page of the newly added integration. After assigning people or groups within your org to this integration, go to the Sign On tab, and take note of Client ID and Client Secret under OpenID Connect.

4. Have the following four values on hand:

   1. Client ID

   2. Client Secret

   3. Okta domain of your org (which can be found under the dropdown on the top right; looks like ***.okta.com) and

   4. Your company’s email address domain (i.e. whatever’s after ‘@’ in the email addresses in your org)

5. In Nooks, go to Settings →User Management → Identity and Provisioning and click Configure SSO.

   

6. Select OIDC and enter the values from step 4 noted in step #4 above into the corresponding fields:

   1. Issuer URL

   2. Client ID

   3. Client Secret

   4. Allowed Email Domains (comma-separated)

   

7. Press Save.

[Optional] Setting Up an Okta Tile for a Seamless Login Experience

By default, adding Nooks from the Okta App Catalog creates a tile in your users' Okta dashboard. However, launching Nooks directly from that tile triggers an IdP-initiated flow, which Nooks does not currently support, so users who click it will hit an error.

To give your users a working tile without this errors, keep the integration configured as described above, but point them to a separate Okta Bookmark App instead of the default tile.

Recommended Setup

To use a tile setup, follow the setup steps below.

1. Keep the Nooks integration configured in Okta as described in the Configuration Steps above.

2. Hide that app's tile from end users in Okta so they do not launch it directly. See these steps for how to do this.

3. Create a new Okta Bookmark App through these steps. Input the following values, then click Done.

   1. Application Label: Nooks

   2. URL: https://app.nooks.in/

4. Add a logo to the tile. A couple of logo options are provided below.

5. Assign the Bookmark App to the users or groups who should see the Nooks tile.

6. Have your users launch Nooks from the Bookmark App tile, rather than the hidden integration tile.

Logging in to Nooks with Okta (SP-initiated SSO)

Once configuration is complete, the users you have assigned to the Nooks integration can sign in either by going directly to the Nooks login page or by clicking the Okta Bookmark App tile, if you've set one up.

From the Nooks login page, users select "Log in with SSO", enter their company email, and sign in with their Okta credentials in the popup window that opens.

SCIM Provisioning

SCIM provisioning is configured separately from the setup above. Once your SSO sign-in flow is working, you can configure SCIM as its own Okta provisioning app using the SCIM base URL and bearer token provided by Nooks. See our Nooks SCIM User Guide for details.

FAQs

Contact

If you have any questions, please do not hesitate to reach us at support@nooks.in.