Connect an Application for Okta

To connect an application for Okta, complete the following configurations.

Step 1: Get the required information in Okta

Follow the steps below to get the required information for creating an application connection:

  1. Sign in to Okta and navigate to Applications > Applications.

  2. In the Applications page, click Create App Integration.

    Click Create App Integration.

  3. In the Create a new app integration window, select API Services and click Next.

    Select API Services.

  4. Enter a name for your App integration and click Save.

    Enter the app integration nama and click Save.

  5. After saving the app, you will be directed to the service app details page. In General tab > Client Credentials section, click the Copy to clipboard button to copy the client ID and paste it into a safe location.

    Click the Copy to clipboard button.

  6. Click Edit in the Client Credentials section and select Public key / Private key as the client authentication method.

  7. Click Add key in the PUBLIC KEYS section.

    Click Add key.

  8. In the Add a public key window, click Generate new key to generate a new public key and then click Copy to clipboard to copy the private key.

    NOTE

    The private key is available in both JSON and PEM formats. You may copy either one as needed.The Add a public key window.

  9. When you finish generating the public key and copying the private key, click Done.

  10. Under the General Settings section, click Edit, deselect the Require Demonstrating Proof of Possession (DPoP) header in token requests option in the Proof of possession field and click Save.

    Deselect the Require Demonstrating Proof of Possession (DPoP) header in token requests option.

  11. Navigate to the Okta API Scopes tab and grant the following permissions to your service app.

    • okta.apps.read

    • okta.devices.read

    • okta.groups.read

    • okta.orgs.read

    • okta.roles.read

    • okta.userTypes.read

    • okta.users.read

    Grant permissions for the app.

  12. Navigate to the Admin roles tab and make sure the Super Administrator role is granted to the app.

    NOTE

    The Super Administrator role is required to enable backups for all Okta objects supported by Cloud Backup for SaaS Applications. All other administrative roles, including custom roles, have certain limitations when backing up specific objects.

Step 2: Create an application connection in AvePoint Online Services

Follow the steps below to create an application connection in AvePoint Online Services:

  1. In AvePoint Online Services, navigate to Management > App management > Application connection, and then click Create on the action bar.

  2. In the Create application connection panel, complete the following settings:

    • Profile name – Enter a name for your connection profile.

    • Description – Enter a description for the connection for future reference. This field is optional.

    • Select application – Select Okta from the drop-down list.

    • Okta domain – Enter your Okta domain: https://{domain}.

    • Client ID – Enter the client ID copied from Okta.

    • Private key – Enter the private key copied from Okta.

  3. Click Save.

Once you have created the connection profile, it will appear on the Management > App management > Application connection tab. Your application will now be connected. If needed, you can select a connection profile to Edit or Delete it.