Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DOC-884: Update Okta Documentation for SAML #1634

Merged
merged 8 commits into from
Oct 4, 2023

Conversation

wcrum
Copy link
Member

@wcrum wcrum commented Oct 2, 2023

Describe the Change

This PR updates the Okta documentation with a step-by-step guide on how to configure SAML.

Review Changes

🎫 Jira Ticket SCS-1112

@wcrum wcrum requested a review from a team as a code owner October 2, 2023 21:32
@netlify
Copy link

netlify bot commented Oct 2, 2023

Deploy Preview for docs-spectrocloud ready!

Name Link
🔨 Latest commit 20812de
🔍 Latest deploy log https://app.netlify.com/sites/docs-spectrocloud/deploys/651cc10af91b500008f399ac
😎 Deploy Preview https://deploy-preview-1634--docs-spectrocloud.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

<br />

:::info
Due to some browsers that add additional formatting and spacing for XML data, you can run the below command to copy the contents to your clipboard.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[spectrocloud.ableism] Avoid using ableism terms. Use 'issue' instead of 'run'.

@github-actions
Copy link
Contributor

github-actions bot commented Oct 2, 2023

Images automagically compressed by Calibre's image-actions

Compression reduced images by 32.9%, saving 329.99 KB.

Filename Before After Improvement Visual comparison
static/assets/docs/images/saml-okta-images/okta-create-application.png 92.40 KB 65.41 KB -29.2% View diff
static/assets/docs/images/saml-okta-images/okta-metadata-url.png 151.70 KB 104.61 KB -31.0% View diff
static/assets/docs/images/saml-okta-images/okta-saml-attribute-statements.png 100.95 KB 72.99 KB -27.7% View diff
static/assets/docs/images/saml-okta-images/okta-saml-general-settings.png 133.17 KB 86.63 KB -35.0% View diff
static/assets/docs/images/saml-okta-images/palette-manage-sso-okta-metadata.png 300.44 KB 196.72 KB -34.5% View diff
static/assets/docs/images/saml-okta-images/palette-manage-sso-okta-saml.png 223.22 KB 145.54 KB -34.8% View diff

480 images did not require optimisation.


<br />

6. Switch back to your Okta Admin console and paste the copied value to the **Single sign-on URL** and **Audience URI (SP Entity ID)**.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?


<br />

6. Switch back to your Okta Admin console and paste the copied value to the **Single sign-on URL** and **Audience URI (SP Entity ID)**.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Terms] Use 'admin' instead of 'Admin'.

@wcrum wcrum changed the title Update Okta Documentation for SAML DOC-884: Update Okta Documentation for SAML Oct 3, 2023
Copy link
Contributor

@karl-cardenas-coding karl-cardenas-coding left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome PR @wcrum . I'm gonna setup a short meeting to go over the things missing to get this over the fence. Thanks again for writing this up.

- renamed all files based on standard
- separated oidc / saml documentation
- added validation / team creation for okta saml
@wcrum
Copy link
Member Author

wcrum commented Oct 3, 2023

@karl-cardenas-coding updated based on review on call.

@@ -32,4 +32,7 @@ Enable SSO by following our [Enable SSO in Palette](enable-saml.md) guide.
- [Enable SSO with Microsoft Active Directory Federation Service (AD FS)](palette-sso-with-adfs.md)


- [Palette SSO with Okta](palette-sso-with-okta.md)
- [Palette SSO with Okta OIDC](palette-sso-with-okta-oidc.md)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?

- [Palette SSO with Okta OIDC](palette-sso-with-okta-oidc.md)


- [Palette SSO with Okta SAML](palette-sso-with-okta-saml.md)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?




# Enable SSO with Okta SAML
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?


Single Sign-On (SSO) is an authentication method that enables users to log in to multiple applications and websites with one set of credentials. SSO uses certificates to establish and maintain a trust relationship between the Service Provider (SP) and an Identity Provider (IdP). Palette supports SSO based on either the Security Assertion Markup Language (SAML) or OpenID Connect (OIDC).

The following steps will guide you on how to enable Palette SSO with [Okta Workforce Identity Cloud](https://www.okta.com/products/single-sign-on/) based on SAML.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?


## Prerequisites

- You need to have either a free or paid subscription with Okta. Okta provides free [developer subscriptions](https://developer.okta.com/signup/) for testing purposes.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?


## Resources

- [Okta Workforce Identity Cloud](https://www.okta.com/products/single-sign-on/)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?

---





# Enable SSO with Okta
# Enable SSO with Okta OIDC
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?

@@ -28,8 +28,9 @@ The following steps will guide you on how to enable Palette SSO with [Okta Workf
- If you want to use the same Okta application for OIDC-based SSO into your Kubernetes cluster itself, you need to install [kubelogin](https://github.com/int128/kubelogin) on your local workstation to handle retrieval of access tokens for your cluster.


## Enablement
## Create the Okta Application
## Okta with OIDC
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?

## Create the Okta Application
## Okta with OIDC

### Create the Okta Application
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?

@@ -124,7 +125,7 @@ The following steps will guide you on how to enable Palette SSO with [Okta Workf

<br />

## Create an Okta Authorization Server
### Create an Okta Authorization Server
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?

@@ -32,4 +32,7 @@ Enable SSO by following our [Enable SSO in Palette](enable-saml.md) guide.
- [Enable SSO with Microsoft Active Directory Federation Service (AD FS)](palette-sso-with-adfs.md)


- [Palette SSO with Okta](palette-sso-with-okta.md)
- [Palette SSO with Okta OIDC](palette-sso-with-okta.md)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?


<br />

![Create Okta Application](/saml-okta-images/user-management_saml-sso_palette-sso-with-okta-saml_create-application.png)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?


<br />

![Configure Okta General Settings](/saml-okta-images/user-management_saml-sso_palette-sso-with-okta-saml_general-settings.png)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?


<br />

![Copy Okta SAML Metadata](/saml-okta-images/user-management_saml-sso_palette-sso-with-okta-saml_metadata-url.png)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?


### Validate

1. Log in to Palette through SSO as an Okta user who is a member of the Okta application to verify SSO. If you are still logged into Palette with a non-SSO user, log out by selecting **Logout** in the **User Menu** at the top right.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Okta'?

@karl-cardenas-coding karl-cardenas-coding added backport-version-4-0 Backport change to version 4.0 auto-backport Enable backport backport-version-3-4 Backport change to version 3.4 labels Oct 4, 2023
Copy link
Contributor

@karl-cardenas-coding karl-cardenas-coding left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR @wcrum

@karl-cardenas-coding karl-cardenas-coding merged commit 9909d5d into master Oct 4, 2023
12 checks passed
@karl-cardenas-coding karl-cardenas-coding deleted the will-okta-saml-documentation branch October 4, 2023 01:51
vault-token-factory-spectrocloud bot pushed a commit that referenced this pull request Oct 4, 2023
* Update Okta Documentation for SAML

* Optimised images with calibre/image-actions

* Fix spelling

* Fix spelling

* Update Okta SAML Documentation
- renamed all files based on standard
- separated oidc / saml documentation
- added validation / team creation for okta saml

* docs: fixed images names and prevented redirect need

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Karl Cardenas <karl@spectrocloud.com>
(cherry picked from commit 9909d5d)
@vault-token-factory-spectrocloud
Copy link
Contributor

💔 Some backports could not be created

Status Branch Result
version-4-0
version-3-4 Backport failed because of merge conflicts

You might need to backport the following PRs to version-3-4:
- docs: updated URLs to use file path context

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

backport --pr 1634

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

@karl-cardenas-coding
Copy link
Contributor

PR #1644 fixes the broken backport attempt for version 3.4

karl-cardenas-coding pushed a commit that referenced this pull request Oct 4, 2023
* Update Okta Documentation for SAML

* Optimised images with calibre/image-actions

* Fix spelling

* Fix spelling

* Update Okta SAML Documentation
- renamed all files based on standard
- separated oidc / saml documentation
- added validation / team creation for okta saml

* docs: fixed images names and prevented redirect need

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Karl Cardenas <karl@spectrocloud.com>
(cherry picked from commit 9909d5d)

Co-authored-by: Will <30413278+wcrum@users.noreply.github.com>
karl-cardenas-coding added a commit that referenced this pull request Oct 23, 2023
* Update Okta Documentation for SAML

* Optimised images with calibre/image-actions

* Fix spelling

* Fix spelling

* Update Okta SAML Documentation
- renamed all files based on standard
- separated oidc / saml documentation
- added validation / team creation for okta saml

* docs: fixed images names and prevented redirect need

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Karl Cardenas <karl@spectrocloud.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-backport Enable backport backport-version-3-4 Backport change to version 3.4 backport-version-4-0 Backport change to version 4.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants