Okta OIDC SSO - Configuration Guide

Prerequisites

1. Admin Access to your Nuclei Organization.
2. Admin access to an Okta Org.

Supported Features

Service Provider (SP)-Initiated Authentication (SSO) Flow - this authentication flow occurs when the user attempts to log in to the application from Nuclei.

User Federation, role management, etc. are not supported. Users and Nuclei Permissions will still need to be managed from the Nuclei settings page.

Configuration Steps

1. In Okta, Go to Applications → Browse App Catalog, and search and add Nuclei.
   • Direct link is possible here: https://www.okta.com/integrations/nuclei/
2. Assign the users or groups that should be able to log into Nuclei.
3. Go to the Nuclei App → Sign On tab in Okta and note the Client ID and Client Secret.
4. In the Nuclei platform navigate to the Organization Settings page.
5. Enter your Okta Issuer Value as well as the Client ID and Client Secret noted earlier and press "Save Okta SSO Configuration"

Logging into Nuclei using Okta

1. Go to this URL: https://app.nuclei.ai/login/okta/ 
2. Enter your email-address and click on "Sign in with Okta"
3. If you are prompted for your Okta username and password, enter them.
4. If the credentials are valid, you will be redirected to Nuclei and will be logged in.