Has anyone used OKTA with Appian?

RE: Has anyone used OKTA with Appian?

SachinP — Mon, 29 Aug 2022 23:33:24 GMT

Do you make web api call to get users from OKTA and have Appian process created to manage user creation and deactivation? if yes, assuming you have an integration in place? how did you get okta end point?

RE: Has anyone used OKTA with Appian?

Peter Lewis — Thu, 18 Jun 2020 22:35:34 GMT

A good tip - if you ever see an old link like this, you can usually replace the "forum.appian.com" with "docs.appian.com" and the version with "latest" to find a current version of the page. Here's the current information on SAML: https://docs.appian.com/suite/help/latest/Appian_Administration_Console.html#saml-authentication

RE: Has anyone used OKTA with Appian?

sharathp0002 — Thu, 18 Jun 2020 21:45:36 GMT

Hi Weber,

The above link is not working, Is there any recent documentation available regarding OKTA. Please post below if you have any documentation available.

Thanks.

RE: Has anyone used OKTA with Appian?

garym — Fri, 28 Jul 2017 12:54:37 GMT

Hi,
We are on the verge of implementing the Okta solution. I noticed that you mentioned that users that don't authenticate via SAML can go to the URL - <appian_home>/suite/login.jsp.
What happens with the link in he task notifications? Can those be re-directed to this URL?
Otherwise, I don't think I can turn on the option "Use Identity Provider's login page" until all users have been transitioned to authenticate via SAML.

RE: Has anyone used OKTA with Appian?

helmuta — Thu, 06 Oct 2016 16:47:49 GMT

Internal users are on AD and then syncing into Okta.

RE: Has anyone used OKTA with Appian?

garym — Wed, 05 Oct 2016 17:15:57 GMT

OK thanks for the info. Are your internal users on AD or an internal LDAP directory and then syncing into the Okta namespace or are all your users in the Okta namespace and of course, in the local Appian namespace?
We want our external users to be in the Okta namespace and our internal users still in our Active Directory.

RE: Has anyone used OKTA with Appian?

helmuta — Wed, 05 Oct 2016 17:10:42 GMT

No idea on the charges.
Yes, all of our internal users are being authenticated through Okta. We do have a couple of external users and some of our admin accounts that use what we call the workaround. Rather then going to company.appiancloud.com/.../tempo they use company.appiancloud.com/.../login.jsp. In this way you can have users that do not have to authenticate through Okta but use the internal (Appian) authentication.
Task notifications go directly to the task if the user has already logged into Okta. Otherwise they are redirected to login to Okta and then go to their task.

RE: Has anyone used OKTA with Appian?

garym — Wed, 05 Oct 2016 17:00:04 GMT

hi helmuta, good to hear that it is working well for you. So do you have all your users being authenticated via Okta and have the redirection parameter checked so that anyone that tries to login via your Appian login page gets redirected to the Okta login? When a user gets a task notification and they click on the link, do they get redirected to the Okta login page and then when they login, does it take them to the task?
Also, are you able to give me an idea how Okta charges for its services? We have potentially 25000 users but only 10-15% would be logging in during a given month.

RE: Has anyone used OKTA with Appian?

helmuta — Wed, 05 Oct 2016 16:52:10 GMT

Yes, our production environment is has been working with Okta very well. We have also used the API from Okta to gather additional information about our users. It was a breeze to setup.

RE: Has anyone used OKTA with Appian?

garym — Wed, 05 Oct 2016 03:50:36 GMT

Hi Jesset, Helmuta, we are looking at Okta, OneLogin and Centrify for an identity provider. So far, Okta looks good. Have you completed your installation yet?
In addition to our external customers, we are also looking at federating our AD users into the identity provider namespace.

RE: Has anyone used OKTA with Appian?

helmuta — Fri, 26 Feb 2016 18:37:34 GMT

Thank you for all of the information. When wee implement our Okta integration I will update this thread with any additional information that we find.

RE: Has anyone used OKTA with Appian?

JesseTriplett — Fri, 26 Feb 2016 18:29:25 GMT

Our test run was just a proof of concept but we configured a specific group of users to get authenticated through SAML. They would have to login to OKTA first before continuing into Appian, attempting to go to our application URL autoredirected to the OKTA login. I don't believe that was configurable in the brief look we took but I'm not sure.

However our use case involves users outside the core group that don't authenticate via SAML, for them the trick appears to be to send them directly to the url ending in <appian_home>/suite/login.jsp where they can login normally.

Please reply back if you find anything else. We won't be implementing SAML for a few more months at the earliest.

RE: Has anyone used OKTA with Appian?

helmuta — Fri, 26 Feb 2016 17:57:40 GMT

Thank you for the information. One other question. How did you configure Okta? Do you login to Okta and then Appian or Appian and authenticate through Okta?

RE: Has anyone used OKTA with Appian?

JesseTriplett — Thu, 25 Feb 2016 19:29:58 GMT

My team just tested with OKTA as well, worked like a charm and took <1 hr from nothing to working.

RE: Has anyone used OKTA with Appian?

Myles Weber — Thu, 25 Feb 2016 19:23:10 GMT

I am aware of OKTA (SAML) being used with Appian. On the Appian side, the steps that were followed are described here: forum.appian.com/.../Appian_Administration_Console.html