AWX / SAML / OKTA ?

Archives AWX Project
1

Hello,

I’m implementing AWX and attempting to integrate single sign-on using Okta (okta.com). The SAML sign-on button redirects me to Okta correctly, but when I get bounced back I just hit the login page. It seems like the Okta side is configured correctly. When I watch the process with SAML-tracer the only outstanding errors I can see are a pair of 401 requests to e.g. /api/v2/settings/all .

My IDP configuration looks like this:

{
“okta”: {
“url”: “”,
“attr_user_permanent_id”: “urn:oid:1.3.6.1.4.1.5555.610.2.2.1.11”,
“attr_username”: “urn:oid:1.3.6.1.4.1.5555.610.2.2.1.11”,
“x509cert”: “”,
“entity_id”: “http://www.okta.com/<ENTITY_TOKEN>”
}
}

I’m wondering if there are some obvious places to look for the problem, or if anyone else out there has experience linking up with Okta as an IDP.

Thanks!

-m

2

The request to /sso/complete/saml/ also redirects (302) to /sso/error/ (which bounces back to /#/settings/)

3

Updated configuration:

{
“okta”: {
“url”: “…”,
“attr_user_permanent_id”: “userName”,
“attr_email”: “email”,
“attr_username”: “userName”,
“x509cert”: “…”,
“attr_first_name”: “firstName”,
“attr_last_name”: “lastName”,
“entity_id”: “…”
}
}