RE: Integration SAML with Okta as IdP is not working.

Jamie Sammons, modified 3 Years ago. New Member Posts: 2 Join Date: 10/22/21 Recent Posts

Hello guys!

I've been trying to setup the SAML in the Liferay console with Okta as IdP, however when I pass the Okta authentication with my user in the Liferay Login page it redirects me to an unsecure site confirmation, when I click on Send anyway it just redirecrts me again to the Liferay login page.


 

In Okta side this are pretty much my configurations:

Single Sign On URL: http://my-liferay-portal/c/portal/saml/sso

Recipient URL: http://my-liferay-portal/c/portal/saml/sso

Destination URL: http://my-liferay-portal/c/portal/saml/sso

And saved the metadata as a .xml file to upload it to the IDP Connections.

In Liferay SAML Admin these are my configurations:

The Entitiy ID is the one that Okta provides me like: http://www.okta.com/xxxxxxxxxxxxxxxx

In the Service Provider I have this Setup:


And in the General part I have the Entity ID again and one certificate and Private Key that I generate directly in there.

So at this point I'm not really sure what I coould be doing wrong, I mean, Okta ask me for my Okta credentials and are okay but after validating them, it's not redirectiing to the main page of Liferay, it shows as unsecured site and redirects me again to the login page.

Appreciate your help guys, thanks in advance,

Hiram R

 

thumbnail
Olaf Kock, modified 3 Years ago. Liferay Legend Posts: 6441 Join Date: 9/23/08 Recent Posts

You state

Single Sign On URL: http://my-liferay-portal/c/portal/saml/sso

Recipient URL: http://my-liferay-portal/c/portal/saml/sso

Destination URL: http://my-liferay-portal/c/portal/saml/sso

and those "http" URLs are, as the message states, not secure. Consider running your portal on https, and make this fact known to Octa

Hiram Rosales, modified 3 Years ago. New Member Posts: 2 Join Date: 10/22/21 Recent Posts

Hi Olaf, thanks a lot for your answer.

Tried that, runnign on https and modifying the URLs, but after that the behavior is similar just without the secure page. The redirection to the Login page of Liferay still not working for me, I'm not sure if it is related to the certificate between Okta and Liferay.

Thanks!