Configuring Okta Authentication

To use Okta authentication for your FortiSIEM deployment, you must set up a SAML 2.0 Application in Okta, and then use the certificate associated with that application when you configure external authentication.

1. Log in to Okta.
2. In the Applications tab, create a new application using Template SAML 2.0 App.
3. Under Settings, configure the settings similar to the table below:
   

   Post Back URL	Post Back URL
   Application label	FortiSIEM Demo
   Force Authentication	Enable
   Post Back URL	https://<FortiSIEMIP>/phoenix/okta
   Name ID Format	EmailAddress
   Recipient	FortiSIEM
   Audience Restriction	Super
   authnContextClassRef	PasswordProtectedTransport
   Response	Signed
   Assertion	Signed
   Request	Uncompressed
   Destination	https://<FortiSIEMIP>/phoenix/okta

4. Click Save.
5. In the Sign On tab, click View Setup Instructions.
6. Click Download Certificate.
7. Enter the downloaded certificate for Okta authentication.