Does anyone have a working example of OKTA SSO credentials being used to log in to one app and also seamlessly work when opening links from that app?

TS
Tim Schisel
Kimberly-Clark Corporation HEADQUARTERS

It appears that extensible SSO is the configuration to use, but it is unclear as to how exactly it needs to be configured. I have tried with the initial app called out in the 'App Extension Bundle Identifier' field and different variations of the company's OKTA address in the URL prefix for Redirect SSO type and Host Name for Credential SSO type. I haven't been able to find great documentation.

2 years ago
iOS
ANSWERS
PM
Patrick McGlynn
2 years ago

Tim,

When logging into to Okta, it should drop a cookie on your browser that can be reused automatically by other web apps launched with the same browser. 

How are you authenticating with Okta to being with?  Is your app using CCT for authentication? 

How are the links being opened and in what browser?

BlueFletch offers a SSO solution for shared devices that can assist with token and cookie management while improving the user login flow.  We also offer support for additional methods of login including NFC and FIDO2 for Okta.

TS
Tim Schisel
2 years ago

If I use the Safari browser, log in to the web app and then open another tab for the domain, the SSO works properly.

When we use SAML to log in to the iOS app itself and open links from within the app that navigate to the enterprise domain, we would like SSO to work for those subsequent links that open in Safari. Right now it requires us to authenticate again for all of the links opened from the app.

I have tested a bit with the Extensible SSO configuration, but I think I am missing something and don't know what because I haven't found clear instructions or an example. We have entered a ticket as well, but just got a link to more vague information.

M
MNMOD@SOTI Gold Contributor
2 years ago

Hi Tim,

Thank you for posting on SOTI Pulse!

I see that you have created a support case with us. Please keep us updated here, once the resolution to the issue has been found.

Kind regards,

Technical Support Specialist | SOTI | +1 905.624.9828 | SOTI.net l Discussion Forum | Log a Case Online l Facebook l LinkedIn l Twitter