English Español Français
Go to YuJa
  1. YuJa Help Center
  2. Panorama LMS Accessibility Platform
  3. Configuration Settings

Integrating Okta SSO with Panorama

Avatar
YuJa
  • Updated

As an admin, you can integrate Okta SSO with Panorama, allowing your institution's users to log in to Panorama using their Okta credentials.

Locating Your Panorama Identifier Key 

Before integrating Okta SSO with Panorama, you will need to locate your Panorama Identifier Key.

  1. Log in to Panorama as an admin.
  2. In the sidebar, select Configuration > Institution Information.
    Panorama institution information page with configuration tab and institution information tab circled
  3. Copy the Primary Identifier Key. It will be used in step 5 of Adding Panorama to Okta as an Application.
    Panorama institution information page with primary identifier key circled

Adding Panorama to Okta as an Application

Once you have located your Panorama Identifier Key, you can add Panorama as an application on Okta.

  1. Log in to Okta as an admin.
  2. In the sidebar, select Applications > Create App Integration.
    Okta applications page with applications and create app integration button circled
  3. Select SAML 2.0, and then click Next.
    Okta new app integration modal with SAML and next button circled
  4. In the App name field, enter YuJa Panorama, and then click Next.
    Okta general settings with app name field and next button circled.png
  5. Enter the Single sign-on URL and the Audience URI using your custom URL in the following format. If you do not have a custom URL, use your zone.
    Okta applications page with URL field circled
    • Single sign-on URL: Replace <Your_Primary_Identifier_Key> with the primary identifier key copied in step 3 of Locating Your Panorama Identifier Key.
      • US Zone: https://panorama.yuja.com/api/sso/samlReceiveResponse?identifierKey=<Your_Primary_Identifier_Key>
      • Canadian Zone: https://panorama-cz.yuja.com/api/sso/samlReceiveResponse?identifierKey=<Your_Primary_Identifier_Key>
      • European Zone: https://panorama-ez.yuja.com/api/sso/samlReceiveResponse?identifierKey=<Your_Primary_Identifier_Key>
      • Australian Zone: https://panorama-az.yuja.com/api/sso/samlReceiveResponse?identifierKey=<Your_Primary_Identifier_Key>
      • Custom URL: https://<YOUR_CUSTOM_Panorama_URL>/api/sso/samlReceiveResponse?identifierKey=<Your_Primary_Identifier_Key>
        • Example: https://evergreen.panorama.yuja.com/api/sso/samlReceiveResponse?identifierKey=9856168ce455592621561e14123d4
    • Audience URI (SP Entity ID)
      • US Zone: https://panorama.yuja.com
      • Canadian Zone: https://panorama-cz.yuja.com
      • European Zone: https://panorama-ez.yuja.com
      • Australian Zone: https://panorama-az.yuja.com
      • Custom URL:  https://<Your_Custom_Panorama_URL>
        • Example: https://evergreen.panorama.yuja.com
  6. In the Name ID format field, select EmailAddress.
    Okta applications page with name ID format field circled
  7. In the Attribute Statements section, enter the Attribute Statements using the following format.
    • Name: Email, Name format: Unspecified, Value: user.email
    • Name: FirstName, Name format: Unspecified, Value: user.firstName
    • Name: LastName, Name format: Unspecified, Value: user.lastName
    • Name: Role, Name format: Unspecified, Value: user.title
  8. Click Next.
    Okta applications page with attribute statements fields and next button circled
  9. Select the This is an internal app that we have created check box.
  10. Click Finish.
    Okta with internal app radio button and finish button circled
  11. Select the Assignments tab.
  12. Click Assign > Assign to People or Assign to Groups to add new users into Panorama.
    Okta with assignments tab and assign button circled.png
  13. Locate the user or group you want and click Assign.
    Okta applications page with assign button circled.png
  14. Click Save and Go Back.
    Okta applications page with save and go back button circled.png
  15. Click Done. 
    Okta applications page with done button circled.png
  16. Click the user that you want to give the admin role to.
    Okta applications page with name circled.png
  17. Click the Profile tab > Edit.
    Okta profile tab with profile tab and edit button circled
  18. In the Title field, enter the role name for admins.
    Example: IT Manager.
  19. Click Save.
    Okta applications page with title field and save button circled
     

Getting Okta’s Identity Provider SSO URL and Certificate Fingerprint

Once you have added Panorama to Okta as an application, you can get Okta's identity provider SSO URL and certificate fingerprint.

  1. Log in to Okta as an admin.
  2. In the sidebar, select Applications.
  3. In the Applications list, select YuJa Panorama.
    Okta application page with application and Panorama circled.png
  4. Select the Sign On tab.
  5. Click View SAML setup instructions.
    Okta application page with application and Panorama circled.png
  6. Copy the Identity Provider Single Sign-On URL and X.509 Certificate, including the BEGIN CERTIFICATE and END CERTIFICATE text. It will be used in step 5 of Integrating Okta with Panorama. 
    Okta 509 certificate circled.png
  7. Go to One Login SAML Tool.
  8. In the X.509 field, paste the X.509 Certificate copied in step 6 and then click Calculate Fingerprint.
  9. Copy the FingerPrint. It will be used in step 5 of Integrating Okta with Panorama.
    One Login Calculate Fingerprint page with certificate and fingerprint buttons circled

Integrating Okta with Panorama

Once you have gotten Okta's identity provider SSO URL and certificate fingerprint, you can integrate Okta with Panorama.  

  1. Log in to Panorama as an admin.
  2. In the sidebar, select Configuration > Integration Settings.
    Panorama with sidebar open and configuration and integration settings tabs circled
  3. In the Select Integration field, select SSO - SAML.
  4. Enable the Allow authentication via SSO toggle.
    EqualGround integration settings with select integration field and allow authentication toggle circled
  5. Enter the information as shown below.
    Panorama integration settings page with SSO fields and User Provisioning fields circled
  6. Enable the Enable SSO Mapping toggle.
  7. In the Admin Mapping field, enter the name of the admin role that you added in step 18 of Adding Panorama to Okta as an Application.
    EqualGround integration settings with admin role toggle and button circled
  8. Click Save Changes to complete the integration.
    Note: Click Launch SSO Login Page to test the integration.
    Panorama integration settings page with launch SSO login page button and save changes button circled

Related articles

Contact Support