Session test: logged out
Skip to content

How can we help?

Skip to content
  • There are no suggestions because the search field is empty.

Okta SSO/SAML and Manual User Sync

Step-by-step guide to configuring Okta single sign-on with SAML for the Foxit Admin Console.

Answer

Okta SSO/SAML and Manual User Sync

Prerequisite: Verify Domain in the Foxit Admin Console

  1. Open Foxit Admin Console
  2. Navigate to Settings > Directory Setting > Verify Domain / Domain Settings
  3. You can verify domains in the following two methods:
    • DNS Method – Copy a TXT record to your domain name system. (Recommended)
      • Type -> TXT
      • Host/Name -> @ or leave blank
      • TXT Value -> (Copy>Paste from Foxit Admin Console under
      • TTL -> 1 Hour
    • HTTPS Method – Upload an HTML file to the root folder of your domain’s website.
      • After uploading the HTML file or adding the TXT record, click Verify Domain.
      • In the pop-up dialog box, select TXT Record or HTTPS correspondingly, enter the domain you want to verify in the Domain field, and click Verify domain.
      • Then the domain will be added to the Verified Domains List, and you can view the verification status. The status of a domain may show Unverified. Verifying domains using DNS may take up to 72 hours for your domain to verify and DNS changes to take effect. Then you can click Verify in the Actions column to verify again.

To remove a domain from the list, click Remove in the Actions column. When a verified domain is removed, the users with that domain are no longer managed and won't appear on your managed account page



Okta SSO/SAML Configuration

You can setup SSO (SAML 2.0) between our Admin Console and Okta following the steps below.

This article contains information and instructions related to a third-party application (Okta). These instructions may vary on your environment and need to be confirmed with your Okta vendor, if necessary.

If you have specific needs or specific settings you need to apply, you may need to check those with your IdP admins.

Supported features

The Okta/[Foxit Admin Console] SAML integration currently supports the following features:

  • Service Provider (SP)-Initiated Authentication (SSO) Flow - This authentication flow occurs when the user attempts to log in to the application from Foxit.
  • Identity Provider (IDP)-Initiated Authentication (SSO) Flow - This authentication flow occurs when the user attempts to log in to Foxit from Okta.
  • JIT (Just-In-Time) Provisioning

Configuration steps

1. Open Okta Admin panel or register an Okta account

Open your Okta Admin panel. (www.okta.com)

If you do not already have an Okta Admin account, you can create one.

2. Create an application

On your Okta Admin panel, go to Applications > Applications > Browse App Catalog

3. Enter "Foxit Admin Console" in the Search catalog of integrations field and select the app "Foxit Admin Console".

4. Click Add Integration.

 

5. Give the application a name (in this example, "Foxit Admin Console"). Click Done.

6. Fill in "Default Relay State" (in this example, "https://adminconsole.foxit.com")

7. Collect the SAML Information

Retrieve the following values from the Admin Console, under User ID Management > Directory Setting:

  • SP Assertion Consumer Service URL: The location where the SAML assertion is sent with an HTTP POST. This is referred to as the SP Assertion Consumer Service URL in Foxit Admin Console.

SP Entity ID: The application-defined unique identifier that is the intended audience of the SAML assertion. This is the SP Entity ID in Foxit Admin Console.

8. Fill in SP Assertion Consumer Service URL and SP Entity ID, then click Save.

  • Fill in the SP Entity ID of the Admin Console into the SP Entity ID field of Okta
  • Fill in the SP Assertion Consumer Service URL of the Admin Console into the into SP Assertion Consumer Service URL field of Okta

9. Supported Attributes

* The following SAML attributes are supported:

Name

Value

email

user.email

firstname

user.firstName

lastname

user.lastName

 

10. SP-initiated SSO

Go to Foxit Admin Console Website: https://adminconsole.foxit.com/, and set the Okta settings in the Foxit Admin Console

Note the following information:

SignOn URL

Issuer

Signing Certificate

(Note: The values below are for illustration only. Note the actual values in your instance.)

 

Copy these three values and paste them into the Admin Console (Setting> Directory Settings):

  • Fill in the value of "SignOn URL" from Okta into "Identity provider SSO URL" in the Foxit Admin Console
  • Fill in the value of "Issuer" from Okta into "Identity provider Entity ID" in the Foxit Admin Console
  • Fill in the value of "Signing Certificate" of Okta into "Public x509 certificate" in the Foxit Admin Console

Click Save Configuration at the end of the page.



Okta (SAML SSO 2.0) User Sync Configuration

You can integrate Foxit Admin Console (Service provider) with Okta (Identity provider IdP) easily following the steps below.

This article contains information and instructions related to a third-party application ( Okta ). These instructions may vary on your environment and need to be confirmed with your Okta vendor, if necessary.

If you have specific needs or specific settings you need to apply, you may need to check those with your IdP admins.

Configuration steps

Once you have synced Okta with the Foxit Admin Console, follow the following steps to sync your users.

 

Note: This article contains information and instructions related to a third-party application ( Okta ).

These instructions may vary on your environment and need to be confirmed with your Okta vendor, if necessary.

1. On your Okta Admin panel, go to Security → API → Tokens and click on Create Token.

2. Give the Token a name (in this example, " Okta Token for Foxit "). Click Create Token.

 

3. Copy the Token Value, then click “ OK, got it ”.

 

4. Set the Okta settings in the Foxit Admin Console

a. Fill Okta's Token Value into the API Token field of Admin Console (under Settings > Directory Settings>Directory> More> Sync Settings)

b. fill in the domain of your Okta instance.

c. Select the User's scope. if you select "Sync only assigned groups and users", you will then be able to set up the group scope in the pop-up window.

 

5. Within Okta, assign your Okta user base to the Foxit Admin Console integration application just created

 

6. After users have been assigned in Okta, you can click Sync Users in the Admin Console to synchronize users. You will be notified with a 'Users synced successfully' dialog.