Okta OIDC

​

Overview

OpenID Connect (OIDC) Single Sign-On allows your organization to manage authentication through your existing identity provider. This integration streamlines user access, enhances security, and simplifies user management across your organization. Currently, Bronto supports using OKTA with OIDC.

​

Step 1: Create an OIDC Application in Okta

1. Sign in to your Okta Admin Dashboard
2. Navigate to Applications > Applications
3. Click Create App Integration
4. Select OIDC - OpenID Connect as the Sign-in method
5. Choose Web Application as the Application type
6. Click Next
7. Enter an Application name (e.g., “Bronto”)
8. Add the following Redirect URI which will depend on your Bronto accounts region:
   • EU: https://auth.eu.bronto.io/oauth2/idpresponse
   • US: https://auth.us.bronto.io/oauth2/idpresponse
9. Under “Allowed grant types,” ensure “Authorization Code” is selected
10. Under “Assignments,” select which users or groups should have access
11. Click Save
12. Note the Client ID and Client Secret from the application details

​

Step 2: Configure SSO in Bronto

1. Navigate to Settings > Organization Settings > SSO > Configure new.
2. Select “OIDC” from Idp type dropdown
3. Enter the following information:
   • Display Name: “Okta” (or your preferred label)
   • Issuer URL: https://your-okta-domain.okta.com (your Okta tenant URL)
   • Client ID (from Step 1)
   • Client Secret (from Step 1)
   • Choose email domains to associate with this identity provider. eg your-company.io
4. Configure mapping of attributes, Okta’s default is given_name, family_name and email
5. Upload and Enable
6. Copy Start URL Value

​

Step 3: Add URL to OKTA

1. Once Step 2 is complete you be presented with a popup window in Bronto containing 3 sections.
2. Copy the Start URL value
3. Go to Okta App created above, select edit next to General Settings
4. Paste Start URL value from step 2 into Initiate login URI field, save
5. Ensure Login initiated by is set to: Either Okta or App
6. Ensure Display application icon to users enabled.

​

Troubleshooting

• Authentication fails: Verify the Client ID and Client Secret are correct
• Redirect errors: Ensure the redirect URI exactly matches what’s configured in Okta
• User cannot access the application: Check group assignments in Okta
• Missing user information: Verify attribute mapping in both Okta and Bronto
• App Missing from Okta panel: Ensure “Login initiated by” setting is set to “Either Okta or App”, is assigned to users and “Application visibility” is set to “Display application icon to users”