How to Configure OIDC in Okta for Sociabble

Read this before you enable OIDC

Enabling OIDC will affect all users who use this application, which means that users will not be able to sign in through their regular log in page. They will only be able to access the app through the Okta service.

Backup URL

Sociabble does not provide a backup log in URL where users can sign in using their normal username and password. You can contact Sociabble Support (sso@sociabble.com) to turn off OIDC, if necessary.

Contents

Supported Features

The Okta/Sociabble OIDC integration currently supports the following features:

  • SP-initiated SSO
  • JIT (Just In Time) Provisioning

For more information on the listed features, visit the Okta Glossary.

Configuration Steps

  1. Contact the Sociabble Support team (sso@sociabble.com) and request that they enable OIDC for your account.
  2. Include the following attributes with you request:
    1. OIDC_redirect variable that identifies your company (it should be something short with few character like “xxx”  3 to 10 characters, it will be used to generate your redirect URI like“https://app.sociabble.com/oidc/xxx-sociabble/signin”)
    2. Client ID
    3. Client secret
    4. URL for your “Well-known” OIDC configuration.
  3. The Sociabble Support team will process your request and enable OIDC for your account.
  4. Done!

Notes

The following OIDC scopes used are:

  • openid
  • email
  • profile

And the minimal attributes used are:

NameValue
firstnameuserinfo:given_name
lastnameuserinfo:family_name
emailuserinfo:email
USERIDidtoken:sub

SP-initiated SSO

  1. Go to: https://app.sociabble.com/Launch
  2. Enter you email address into the corresponding field.
  3. Click Get started.