Search... ⌘ K
Get Started Contact Sales

Okta as an Identity Provider

Last updated

Table of Contents

Using Okta as an identity provider for single sign-on (SSO) streamlines the login experience for you and your team and helps you manage risk at scale. You can read more about the benefits of using Okta SSO for DNSimple in this post.

Prerequisites

To proceed with configuring login with SSO through Okta, you must:

Supported features

  • SP-initiated Single Sign-On (SSO): Service provider initiated. The user starts on the DNSimple login page and authenticates with Okta.
  • Import Users: Manage who can access your DNSimple account by assigning users to the Okta application

Video walk-through

Linking an Okta organization to a DNSimple account

You can also follow the instructions in Okta’s documentation to connect DNSimple to your Okta organization.

Adding the DNSimple app to Okta

Note

These steps are performed in your Okta account.

  1. Log in to your organization’s Okta dashboard as an administrator.
  2. Go to the Applications page, then click Browse App Catalog.
  3. Search for DNSimple and click Add Integration.
  4. Click the Assignments tab to give users and groups from your Okta directory permission to log in to DNSimple via Okta as an identity provider. Read more about assignments in Okta.
  5. Click the Okta API Scopes tab. Look for the okta.eventHooks.manage and okta.eventHooks.read scopes, and click Grant for each of them. Make sure to verify they have been granted. Read more about configuring settings and API scopes in Okta.
  6. Click the Sign On tab. Note the client ID and client secret, as you will need them to configure DNSimple for Okta SSO.

Configuring DNSimple for Okta SSO

Note

These steps are performed in your DNSimple account.

  1. At DNSimple, go to the Account page, and click the Single Sign-On tab.
  2. Click Authorize with Okta to authorize the Workspace.
  3. Fill in the Okta domain, client ID, and client secret, then click Link. You need to log in to the Okta Workspace with access to the okta.eventHooks.manage and okta.eventHooks.read scopes. Your Okta user needs to already be assigned to the DNSimple app integration in Okta with an email address that matches your DNSimple user email address.
    Link account to Okta
  4. After logging in via Okta, you will arrive back on the DNSimple Single Sign-On page with Okta SSO enabled for the account.
  5. Repeat the process for each account where you want Okta SSO enabled.

When configuring Okta SSO, DNSimple creates an event hook in the Okta organization to listen and react to membership changes. If multiple configurations are made to the same Okta organization, only a single hook is created.

If the Okta app is no longer linked (for example, the access token is revoked or the event hook is removed), DNSimple emails the account’s notification email, or the account administrators if none is set, asking you to reauthorize. On the Single Sign-On tab, click the … menu at the end of the Okta row, then select Reauthorize.

Assigning people or groups

To give people access to DNSimple, click Assignments under the configured DNSimple app in your Okta dashboard. Click Assign, and select the appropriate users.

If an assigned user does not already have a DNSimple user with the same email address, DNSimple creates one for them, adds them to the account, and emails them that they can log in with Okta.

If an assigned user already exists, they will need to link their DNSimple user to their Okta identity on the User Settings page within DNSimple before they can log in to DNSimple with their Okta identity.

The team members can now log in with their Okta identity. When you delete or suspend a team member from your company’s Okta organization admin, the corresponding member’s DNSimple access will be revoked automatically, reducing the administration requirements for your organization.

Access control

You can set the level of DNSimple access for each member under the Members and seats tab in your DNSimple Account settings. For what each access level means, see What is Domain Access Control?. To configure access, see Domain Access Control.

Linking a DNSimple user to an Okta identity

When a DNSimple user exists in a DNSimple account before SSO is enabled, they will be required to link their Okta identity to verify ownership of both DNSimple and Okta user accounts. This is done in your DNSimple user settings.

To link a DNSimple user to an Okta identity:

  1. Go to your User Settings page.
  2. Scroll down to the Identities card, and click Add next to the Okta identity provider.
  3. Authenticate your Okta account.
  4. You can now log in to DNSimple using the linked Okta identity.

Logging in via Okta

You’ll need to link an Okta organization to your DNSimple account before your team members can log in via Okta SSO.

  1. To log in to DNSimple using Okta, visit https://app.dnsimple.com/login.
  2. Click Sign in using Okta.
  3. Enter the company’s Okta domain (for example, your-org.okta.com), and click Sign in.
  4. If you are prompted for your Okta username and password, enter them.
  5. If your credentials are valid, you will be redirected back to DNSimple and logged in.

If you are not yet a member of the DNSimple account, DNSimple adds you with Limited Access and emails the account’s notification email, or the account administrators if none is set. An administrator then grants you access. Once they have granted access, you will be able to see the DNSimple account’s assets.

If you log out of Okta, you will also be logged out of DNSimple.

Unlinking an Okta organization from a DNSimple account

  1. Go to the Account page, and click the Single Sign-On tab.
  2. Click the … menu at the end of the SSO workspace’s row, then select Revoke.

Unlinking a DNSimple user from an Okta identity

  1. Go to the User Settings page.
  2. In the Identities card, click the … menu at the end of the identity’s row, then select Revoke.

Have more questions?

If you have any questions about using Okta SSO with DNSimple, contact support, and we will be happy to help. You can also read more about DNSimple Enterprise.