Overview
This article details the steps to configure the PXS and your Okta instance to support SSO. General information about SSO, like user administration and login details can be found on our Paytronix Customer SSO Guide.
NOTE: Organizations using Access Identity Unified Login cannot implement traditional SSO configurations, as Access Identity serves as the unified authentication system for all Paytronix products. If you are unsure if your organization uses Access Identity or SSO, please contact your IT administrator to confirm which authentication system your organization has implemented.
Setup
Within Okta, navigate to Applications and create an App Integration with the following parameters:
Sign-in method: OIDC - OpenID Connect
Application type: Web Application
On the “New Web App Integration” screen, set the following URI values
Sign-in redirect URI: https://www.pxsweb.com/login/sso-oidc-callback.srv/
Sign-out redirect URI: https://www.pxsweb.com
Once the App Integration is created, note the Client Credentials. These need to be added into the Client ID and Client Secret fields on the SSO Configuration page in the PXS.
On the App Integration’s Sign On tab, make sure the Issuer attribute of OpenID Connection ID Tokenbsection is set to be Okta URL(https://your_okta_domain)
The Provider Metadata URL on the Paytronix SSO Configuration page depends on how your Authorization Server is configured:
If you use Okta’s Org Authorization Server, the metadata URL will be https://${yourOktaOrg}/.well-known/openid-configuration
If you have a Custom Authorization Servers
For default Custom Authorization Server, the metadata URL will be https://${yourOktaDomain}/oauth2/default/.well-known/openid-configuration, e.g. https://dev-62379322.okta.com/oauth2/default/.well-known/openid-configuration<;
For other Custom Authorization Servers, the metadata URL will be https://${yourOktaDomain}/oauth2/${authorizationServerId}/.well-known/oauth-authorization-server . The authorization ServerId is a Okta generated identifier, which can be found on the Custom Authorization Server’s Settings page as highlighted in the picture below:
6. You have successfully configured the PXS and Okta to support SSO! If you have questions, please reach out to the Paytronix Support team.