Connecting your identity provider to Confidencial

Creating an application in Okta

1. Log in to your Okta instance’s admin portal

2. Click Applications under the Applications item in the side menu

3. Click the Create App Integration button

4. Select OIDC - OpenID Connect and Web Application for Sign-in method and Application type, respectively; click Next

5. Ensure the following settings are entered:
1. App integration name: Confidencial
2. Grant type: Authorization Code (the only option that should be selected)
3. Sign-in redirect URIs: https://auth.confidencial.io/login/callback
4. Sign-out redirect URIs: https://my.confidencial.io

6. For Controlled access, select either “Allow everyone in your organization to access” or “Limit access to selected groups,” depending on who you want to be able to log in to Confidencial.
1. If you selected “Allow everyone…,” leave “Enable immediate access with Federation Broker Mode” selected if you want everyone in your organization to be able to access Confidencial. Deselect “Enable immediate access with Federation Broker Mode” if you want to specify the users and groups that can access Confidencial.
2. If you selected “Limit access…,” enter the group(s) you’d like to access Confidencial under Selected group(s).

7. Click Save

Assigning users to an application in Okta

1. Click Applications under the Applications item in the side menu

2. Click Confidencial in the list of applications

3. Click the Assignments tab

4. Click Assign to add users and groups that can log in to Confidencial

Creating an application in Azure Active Directory (AD)

1. Log in to the Microsoft Azure portal

2. Click Azure Active Directory

3. Click App Registrations from the side menu

4. Click New Registration from the top toolbar

5. Ensure the following settings are entered:
1. Name: Confidencial
2. Supported account types: Select either “Accounts in this organizational directory only,” “Accounts in any organizational directory,” or Accounts in any organization directory and personal Microsoft accounts,” depending on who you want to be able to join your Confidencial organization
ℹ️
Most organizations will want to select “Accounts in this organizational directory only,” as users outside your organization can log in to Confidencial via their own organization account or via an individual account.
3. Redirect URI: Choose “Web” in the Select a platform drop down menu and enter https://auth.confidencial.io/login/callback in the input box

6. Click Register

7. Click Enterprise Applications from the side menu

8. Click Confidencial in the list of applications

9. Click Properties from the side menu

10. If you want to specify the users that can log in to Confidencial, set Assignment required to “Yes,” otherwise, all users* will be able to log in to Confidencial

All users with a supported account type specified in Step 5.b above

Assigning users to an application in Azure AD

1. From the Azure Active AD home screen, click Enterprise Applications from the side menu

2. Click Confidencial in the list of applications

3. Click Users and groups from the side menu

4. Click Add user/group to add users and groups that can log in to Confidencial