Okta SSO

​

Configuring Okta SSO for Cortex

• Installing the Cortex app in the Okta Integration Network (OIN)
  • This option provides a simplified setup for most standard use cases. It’s compatible with Okta SCIM provisioning features.
• Creating your own app
  • This option is best if you need more flexibility in configuring redirect behavior, want to configure automatic sign-on, or if you require multiple or advanced configurations.

​

Configuring Okta SSO via the Cortex OIN app

​

Step 1: Installing the Cortex OIN app

1. Install the Cortex app from the Okta OIN.

​

Step 2: Copying the client ID and client secret

1. In Okta, navigate to the Applications page and select the Cortex app from your list of applications.
2. Click the Sign On tab.
3. Copy the values of the client ID and client secret. Store them in a secure location, as you will need these in the next steps.
   Be sure to copy the client ID and the client secret and save them for later. Do not skip this step—you can only view these values once!

​

Step 3: Obtaining the issuer URI

​

Step 4: Configuring SSO in Cortex

1. Log in to Cortex.
2. From the main sidebar, click your avatar in the bottom-left corner.
3. Click Settings.
4. From the Settings menu, scroll to the Security and access section, then select OpenID connector. The OpenID connector page is displayed.
5. Enter the following values:
   • From the Type drop-down menu, select Okta.
   • In the Identifier field, enter your client ID.
   • In the Secret field, enter your client secret.
   • In the Issuer field, enter the issuer URI.
6. Click Save.

​

Configuring Okta SSO via your own app

​

Step 1: Creating an Okta app integration

1. Log in to the Okta admin console.
2. Navigate to Applications, then select Create App Integration.
3. In the modal under the sign-in methods, select OIDC - Open ID Connect. Under Application type, select Web Application.
4. On the next page, enter a name, logo, and grant type for the app.
   • To bypass the login screen and enable automatic sign on, see Auto sign-on below.
5. Click Save.
   • You will be redirected to the app’s overview page.
6. From the app’s overview, click the General tab. Copy the values of the client ID and client secret. Store these in a secure location, as you will need them in the next steps.

• Grant type - Authorization Code
• Initiate login URI - https://app.getcortexapp.com/login?tenantCode=TENANT_CODE (replace TENANT_CODE with your Cortex tenant code. This is what triggers auto sign-on directly into your workspace)
• Sign-in redirect URIs - Add all of the following:
  • https://cortexapp.auth0.com/login/callback (required for all configurations; this is the redirect URI the Auth0 OAuth flow uses)
  • https://api.getcortexapp.com/login/oauth2/code/okta (required for the standard SSO login flow)
  • https://app.getcortexapp.com/login?tenantCode=TENANT_CODE (replace TENANT_CODE with your Cortex tenant code)

​

Step 2: Configuring SSO in Cortex

1. Log in to Cortex.
2. From the main sidebar, click your avatar in the bottom-left corner.
3. Click Settings.
4. From the Settings menu, scroll to the Security and access section, then select OpenID connector. The OpenID connector page is displayed.
5. Enter the following values:
   • From the Type drop-down menu, select Okta.
   • In the Identifier field, enter your client ID.
   • In the Secret field, enter your client secret.
   • In the Issuer field, enter your Okta account domain, e.g. https://{okta-domain}.okta.com.
6. Click Save.

​

Troubleshooting and FAQ