Okta

Overview

The integration with Okta lets you use Okta as your single sign-on and multi-factor authentication service to access Chargifi Cloud. This adds an extra layer of security for our customers.

Prerequisites

To facilitate single sign-on and multi-factor authentication with Okta and Chargifi Cloud, you’ll need to have the following:

• An Okta license
• Access to an Okta Admin account

For users to be able to log in to Chargifi with their Okta account, user accounts need to be created in Chargifi with the same email address as their Okta user.

Getting the Required Information in Okta

To get the information you require from Okta to set up the SSO feature, do the following:

1. Sign in to your Okta organization as a user with administrative privileges.
2. Choose Admin on the upper right of the portal page.
3. Copy the Org URL from the top right corner of the dashboard.
   Note: If your dashboard looks different, try choosing the Developer Console view from the top left menu.
4. Go to Applications -> Add Application.
5. Select Web and choose Next.
6. Fill in the Application Settings as follows:
   1. Name: Chargifi OIDC
   2. Login redirect URIs: https://auth.chargifi.com/sso/authenticate
   3. Logout redirect URIs: https://auth.chargifi.com/en/logout
   4. Grant type allowed: Client Credentials and Implicit (Hybrid)
7. Choose Done.
8. Choose Edit and make the following changes:
   1. Under Allowed grant types, deselect the checkbox Allow Access Token with implicit grant type.
   2. Change Login initiated by to Either Okta or App.
   3. Under Application visibility, select the checkbox Display application icon to users.
   4. Under Login flow, ensure the radio button Redirect to app to initiate login (OIDC Compliant) is selected.
   5. Change Initiate login URI to https://auth.chargifi.com/sso/okta/<CHARGIFI_SSO_ALIAS>.
      Note: You need to pick a name and enter it in place of the <CHARGIFI_SSO_ALIAS> indicated above. This will form part of your personalized SSO login URL to Chargifi Cloud via Okta.
9. Choose Save.
10. Under the Client Credentials section, copy the Client ID and Client Secret.
11. Go to API -> Authorization Servers.
12. Select the default authorization server by clicking the link or the pencil icon.
13. Go to the Scopes tab.
14. Choose Add Scope.
15. Fill in the Add Scope section as follows:
    1. Name: chargifi
    2. Description: This allows Chargifi to verify the client credentials.
16. Choose Create.

Setting up a Chargifi Okta integration in Chargifi Develop

To integrate Okta with Chargifi Cloud, do the following:

1. Go to Chargifi Cloud -> Develop -> Single Sign-On (SSO) -> Okta -> Manage Integration.
2. Click Add Okta Integration.
3. Enter the name you used as an alias in step 8.5 of Getting the Required Information in Okta.
4. Paste your Client ID and Client Secret into the corresponding fields.
5. Paste your Org URL in the Base URI field.
6. Choose Create and Test Integration.
   You will see a confirmation message at the top of your screen.

Obtaining SSO Access

You can manage your Single Sign-On (SSO) Integrations yourself as long as you are a managed service provider (MSP) administrator. Otherwise, please contact your MSP administrator for assistance.

That's it! You are all ready to go.