Configure Okta federated authentication for Arctic Wolf web portals

You can configure Okta® as a Federated Identity Management (FIM) source for Arctic Wolf® web portals.

Folgende Ressourcen werden benötigt:

  • Administratorberechtigungen für Arctic WolfUnified Portal.

    Sie müssen ein primärer oder sekundärer Kontakt sein. Wenn Sie diese Zugriffsstufe benötigen, reichen Sie Ihre Anfrage bei einem primären oder sekundären Kontakt in Ihrer Organisation ein.

Folgende Aktionen sind erforderlich:

  • Allowlist all necessary IP addresses. To see the IP addresses that you must allowlist, sign in to the Arctic Wolf Unified Portal, click Ressourcen > Anforderungen an die Allowlist, and then view the IP addresses in the section for your product.

Configure the application integration

  1. Sign in to the Okta Admin Console.
  2. In the navigation menu, click Applications and Resources > Applications.
  3. Click Create App Integration.
  4. In the Create a new app integration dialog, configure these settings:
    • Sign-in method — Select OIDC - OpenID Connect.
    • Application type — Select Web Application.
  5. Click Next.
  6. In the next dialog, configure these settings:
    • App Integration Name — Enter a descriptive name. For example,Arctic Wolf Unified Portal.
    • Client definition — Select Use Okta-generated client ID.
    • Client acting on behalf of itself — Select Client Credentials.
    • Grant type - Advanced — In the Other grants section, select Implicit Hybrid.
    • Sign-in redirect URIs — Enter https://auth.arcticwolf.com/login/callback.
    • Sign-out redirect URIs — Click X to clear all fields.
    • Trusted Origins — Click X to clear all fields.
    • Controlled Access — Select an option.
  7. Click Save.
  8. Enable immediate access:
    1. In the Federation Broker Mode section, click Edit.
    2. Select Enable Federation Broker Mode.
  9. Click the General tab.
  10. Copy the Client ID and Client secret values, and then save them in a safe, encrypted location. You will provide them to Arctic Wolf later.
  11. In the General Settings section, click Edit.
  12. In the Grant Type section, in the Advanced subsection, select these checkboxes:
    • Allow ID Token with implicit grant type
    • Allow Access Token with implicit grant type
  13. Click Save.

Set the issuer URL

  1. Click the Sign On tab.
  2. In the OpenID Connect ID Token section, click Edit.
  3. In the Issuer list, select the appropriate option.
  4. Click Save.
  5. Copy the Okta URL.
  6. Add /.well-known/openid-configuration to the end of the Okta URL to create the Issuer URL. For example, if the Okta URL is https://demo1234.okta.com, the Issuer URL is https://demo1234.okta.com/.well-known/openid-configuration.
  7. Copy the Issuer URL, and then save it in a safe location. You will provide the Issuer URL to Arctic Wolf later.

Provide your Okta credentials to Arctic Wolf

  1. Melden Sie sich bei Arctic Wolf Unified Portal an.
  2. Klicken Sie im Navigationsmenü auf Organisationsprofil > Föderierte Authentifizierung.
  3. Click Submit New Credentials .
  4. Configure these settings:
    • Account Name — Enter a unique and descriptive name for the account. For example, Okta SSO.
    • Issuer URL — Enter the IdP Issuer URL.
    • Client ID — Enter the IdP-issued client ID.
    • Client Secret — Enter the IdP-issued client secret.
    • Domain Name — Enter your company email domain name.
    • Credential Expiry — (Optional) Enter the credential expiration date, if applicable.
  5. Click Submit Credentials.
  6. To apply the configuration:
    1. When prompted to sign out of the Unified Portal, click Confirm and Logout.
    2. Sign in to the Unified Portal through your identity provider (IdP).