Single Sign On with BrightonID - Okta

Below are the instructions to add your organizations Okta on to BrightonID.  At the end of the document there are a is a link to send the appropriate info to our support team to enable it.

1. To connect your Okta tenant as an identity Provider in Auth0, you must create an OIDC application. In your Okta Admin Dashboard, create a new application.

   Select Applications > Applications, and Create App Integration.

   

2. Select Create App Integration.

   Choose OIDC as the Sign-in method. Choose Web Application as your Application Type.

    

   
3. Select Next.
4. Enter "BrightonID - Brighton Science" for the App integration name.
5. Next, you will enter two (2) redirect URIs in the Sign-in redirect URIs section
   1. In the first box, enter:
      1. https://login.brighton-science.com/login/callback 
   2. Click the "+ Add URI" button
   3. In the next box, enter:
      1. https://clerk.brighton-science.com/v1/oauth_callback
         
         
         
6. Select the appropriate option for your organization under Assignments > Controlled Access
    
7. Leave the rest of the fields as default values
   
8. Click Save.
9. Take note of the Client ID and Client Secret. You will need to provide these to Brighton Science
   
10. With that complete, send us the information we need to enable your Single Sign On.  This information includes:
    
    REQUIRED INFO:
    
    1. 1. ClientID(example: 9cb7e54e-c1fe-483c-8286-750b11cf4ce0)
          1. This is an id that you saved from the previous creation process.
       2. Client Secret(example: MgR8Q~gBK12yW.~pCOsKvEtydyDda82hg7axFawc)
          1. This is a secret that you saved from the previous creation process.
       3. Okta domain(example: example.okta.com)
          1. More information can be found here: Okta Domain
       4. Email Domain(s)(Example: brighton-science.com, btglabs.com)
          1. These are an e-mail domains your users may use for their e-mail addresses.  This is what we use to detect a user from your org and authenticate them with your process, so you only need to include e-mail domains your users would use.

Our support team will configure your environment and reach out to you to test and complete the process.

1. After setup is complete, your users will see our standard login page. After entering their e-mail the page removes the password:
   
2. Upon clicking "Log In", they will either:
   1. be logged in automatically(if they are already logged into Okta with an active session, per your tenant settings) or
   2. Will see your Okta login screen to login
      
3. After login they will be re-directed to the Brighton Science resource.