Enable IdP-initiated SSO login for Okta
In Opti ID, you can configure identity provider (IdP)-initiated login. This lets users log in to Opti ID with your organization's single sign-on (SSO) without having to re-enter their email on the Opti ID login page (https://login.optimizely.com) or re-authenticate if they are already logged in.
After you configure the IdP-initiated login, if users are already logged in with your organization's SSO provider when they navigate to Opti ID, they are redirected to the Opti ID home dashboard without the need to log in again (https://home.optimizely.com). This provides a more seamless login experience to Optimizely.
Note
To redirect users to a specific instance instead of the Opti ID home dashboard, contact Optimizely Support.
Prerequisites
- Okta account with an active subscription
- One of the following Okta roles:
- App Admin
- Super Admin
- Configure the SAML or OIDC SSO connection in your IdP.
- If you want to automatically provision users who log in with a specific domain, you must configure organizational domains before enabling IdP-initiated SSO login.
Configure IdP-initiated SSO login
These instructions are for both OpenID Connect (OIDC) and Security Assertion Markup Language (SAML) SSO integrations with Opti ID and Okta.
If you have multiple SSO connections that you want to configure this for, repeat these instructions for each SSO connection. If you remove and recreate an SSO connection that already has IdP-initiated login configured, you must update the IdP-initiated URL in your IdP.
Copy your IdP-initiated URL from Opti ID
- Go to Settings > SSO in the Opti ID Admin Center.
- Select the SSO connection for which you want to configure the IdP-initiated SSO login.
- Copy the IDP-Initiated URL.
Configure a bookmark app in Okta
- Go to Applications > Browse App Catalog in Okta.
- Search for and select Bookmark App.
- Click Add Integration and complete the following settings:
- Application Label – Enter your desired name for the bookmark app, like Optimizely.
- URL – Enter the IdP-initiated URL you copied from the Opti ID Admin Center.
- Request Integration – Leave this checkbox cleared.
- Application Visibility – Leave this checkbox cleared.
- Click Done.
Okta app portal
After you complete this configuration, the bookmark app displays in the Okta app portal to all users or groups you have assigned it to.
When users click the Opti ID application tile, they automatically authenticate with Opti ID and are redirected to the Opti ID home dashboard.