Okta Active Directory integration with Adobe Learning Manager okta-active-directory-integration-with-adobe-learning-manager
In this document, you will learn how to integrate Adobe Learning Manager with Okta Active Directory (AD). When you integrate Adobe Learning Manager with Okta AD, you can:
- Check and control Learning Manager user’s access in Okta AD.
- Enable users to be automatically signed in to Adobe Learning Manager with their Okta AD accounts.
- Manage your accounts in one central location - the Okta portal.
Adobe Learning Manager supports Identity Provider (IdP) and Service Provider (SP) initiated SSO.
Create an application in OKTA
-
Log in as an Administrator on Okta AD.
-
Click Applications. This opens the Application Store in Okta.
View application store in Okta
-
Click Create App Integration.
Select Create App Integration
-
Select SAML 2.0 from the new app integration window.
Select SAML2.0 option
-
Select Create SAML integration > General settings page. Enter an Application Name.
Note that this can be any name to uniquely identify your application. Once done, click Next.
Enter the name of the application
-
Perform the following steps on the Configure SAML settings page:
For IDP setup:
- In the Single Sign-on URL field, type the URL: https://learningmanager.adobe.com/saml/SSO
- In the Audience URL field, type the URL: https://learningmanager.adobe.com
- In the Name ID Format drop-down box, select Email Address.
- In the Application username drop-down, select Okta username.
- In case you want to pass any additional attributes, you can add the attributes under the Attributes Statement (Optional)
Add SAML attributes
For SP setup:
-
In the Single Sign-on URL field, type the URL: https://learningmanager.adobe.com/saml/SSO
-
In the Audience URL field, type the URL: https://learningmanager.adobe.com
-
In the Name ID Format drop-down box, select Email Address.
-
In the Application, username drop-down select Okta username.
-
Click on Show Advanced Settings.
-
Under Signature Algorithm, select RSA-SHA256
-
In the Assertion Algorithm, select SHA256
-
In the Assertion Encryption dropbox, select Encrypted.
-
In the Encryption Certificate option, upload the Certificate file shared by Adobe.
-
In case you want to pass any additional attributes, you can add the attributes under the Attributes Statement (Optional).
Add additional attributes
Once done, click Next.
-
The Feedback tab is optional. Once you have selected the options and given your feedback, click Finish.
Complete SAML setup
Extract IDP initiated URL and Metadata file
To view the IdP/SP initiated URL and Metadata file, perform the below steps:
-
Open the application that you have created.
-
Under the Single Sign-On tab, click View Instructions.
Select SSO tab
For IDP:
- The Identity Provider Single Sign-On URL is the IdP initiated URL.
- Copy all the text that is present under the Optional field.
- Open a new notepad document and paste the copied text.
- Click File > Save as > “filename.xml”. This will be the metadata file.
For SP:
- The Identity Provider Single Sign-On URL is the IdP initiated URL.
- The Identity Provider Issuer is the Entity ID.
- Copy all the text that is present under the Optional field.
- Open a new notepad document and paste the copied text.
- Click File > Save as > filename.xml. This will be the metadata file.
Save SP XML file
You need to save this file in an XML format.
Configuring Adobe Learning Manager SSO
To configure Adobe Learning Manager SSO, perform the steps mentioned in the below article.