Okta Installation Instructions

This guide will walk you through all the steps to install the Okta Addon.

Setup an application in Okta

Before you get started, you will need to setup an application in Okta.

1. In the sidebar, go to Applications > Applications and create a new App Integration.
2. Select "OpenID Connect" and then "Web Application" and click "Next".
3. Give the application a recognizable name and under the "Login Redirect URIs" section, add this url "[https://yourdomain.com]/pro/auth/okta/callback" but replace [https://yourdomain.com] with your Dradis Pro web url.
4. In Assignments > Controlled Access, select "Allow everyone in your organization to access" or select a group if you have one already.
5. Click "Done".

If you want to automatically assign users as an Admin when signing in to your Dradis Pro application, you will need to create groups (if you don't have one to identify admins) and configure Oauth2 scopes.

1. In Okta, click on Directory > Groups in the sidebar.
2. Add a group and give it a name. Take note of the exact spelling of the group's name, and click "Add Group".
3. Next, click on Security > API in the sidebar.
4. Click on the "default" authorization server.
5. Click on "Scopes" tab and add a new Scope.
6. Enter "groups" for the scope name, uncheck "Set as a default scope" and check "Include in public metadata". Click "Create"
7. Now go to "Claims" tab, and add a new claim.
8. Enter "groups' for the name, select "Groups" for the Value type, and select "Equals" for the filter and enter your group name that you created earlier.
9. Under "Include in" section, select "The following scopes", and enter "groups" in the input field. Wait for the "groups" option to populate and select it. Click "Create".
10. Click on "Access Policies" tab and add a new access policy.
11. Give the policy a name and a description, and make sure the application you have created previously is assigned as a client.
12. Next, click on "Add Rule" for the added policy. Give the rule a name and make sure the group you created previously is assigned to the rule.

You will need to gather your credentials to use in Dradis:

  client_id: "your-client-id"
  client_secret: "your-client-secret"
  issuer: "your-client-issuer"
  admin_group_name: "your-admin-group-name"

You can get your your client_id and client_secret under Applications > Your okta application > General, and scroll to the bottom.

You can get your issuer under the API tab.

Your admin_group_name is the group name that was created in Okta.

Installation instructions for the Okta addon in Dradis

You can now install Okta with the Integration and Tool Manager in the Tools tab.

After Okta has been enabled (Docker deployments) or installed (VM deployments), you will be prompted to configure the integration. Simply insert the values you gathered previously, and you're good to go!