Configure SSO with Okta

This doc will help you quickly walk through the steps to create an Okta app and set up the SAML SSO configuration through the app to sign in inside Hippo Video.

Pre-requisite:

• To activate SSO you need Hippo Video Enterprise plan

• Admin users of Hippo Video and Okta will have access to set up SSO

Note: Before starting with the configuration, ensure that your SSO Configuration page is kept open inside Hippo Video.

To open the SSO configuration page inside Hippo Video:

1. Login to Hippo Video using existing credentials.

2. Click on the Settings icon from the left navigation bar and then click on SSO Configuration card.

3. Or click on the More icon from the left navigation bar > Settings > SSO Configuration card.

   
   

4. Enter Your IDP domain upon which the ACS URL data gets updated automatically.

To configure SSO with Okta:

1. Open the Okta portal in a new tab.

2. Log in with your existing credentials.

3. Click on the More icon from the left.

4. Click on Applications from the left navbar and then click on Applications.

5. Click on Create App Integration at the top left.

6. Select the Sign-in method as SAML 2.0 and then click Next (at the bottom right).

7. In the General Settings tab, enter the name of your app and then click Next.

To configure SAML:

1. In the Configure SAML tab, enter the following details:

   1. Go to Hippo Video - SSO Configuration page and copy the ACS URL (will be updated based on the IDP domain).

   2. Then, navigate to Okta portal and paste it inside the Single sign on URL field.

   3. Enter the Audience URI (SP Entity ID) as https://www.hippovideo.com (temporary). This URL will be updated with the unique identifier provided by Okta.

   4. Select the Name ID Format as Email Address. 

Note: This email id helps in identifying the user inside Hippo Video.

2. Click Next at the bottom right.

3. In the Feedback tab, select your preferred option and then click Finish.

    

4. Now, your app is successfully created in Okta.

To set up the configuration inside Hippo Video, pick up the details from Okta:

1. Once you’ve created the app, you’ll be redirected to this page.

2. Click on the View Setup Instructions button.

3. The following page will open in a new tab where you’ll find the details to configure your app with Hippo Video. 

4. Copy the Identity Provider Issuer URL (unique ID generated by Okta).

   
   

5. Then, navigate to your app page (different tab) click on the General tab.

6. Below the SAML Settings, click Edit.

   
   

7. Click Next at the bottom of the General Settings tab.

8. Then, click on Configure SAML tab and paste it inside the Audience URI (SP Entity ID).

9. Click Next at the bottom and then Finish in the next screen.

10. Now, you have successfully completed the configuration process inside Okta. 

To assign the users inside Okta:

You need to add users who are allowed to log in to Hippo Video using SSO.

1. Click on the Assignments tab. 

2. Click Assign > Assign to People. 

3. Now, click on the Assign button near the appropriate user.

4. Once assigned, click Done. You’ve successfully assigned users.

    

To set up the configuration process inside Hippo Video:

1. From the View Setup Instructions page, copy the Identity Provider Single Sign-On URL.

2. And, paste it inside Target URL of the Hippo Video - SSO Configuration page.

3. Then, copy the Identity Provider Issuer URL from Okta.

   
   

4. Go to the Hippo Video - SSO Configuration page and paste it inside the Issuer URL.

5. Now, navigate to the Okta portal and copy the text that begins right after BEGIN CERTIFICATE … and right before END CERTIFICATE.

6. Again, navigate to the Hippo Video - SSO Configuration page and paste it inside the X509 Certificate.

7. Once you’ve done, click Save to complete the configuration process.