How to Integrate OKTA to MuchSkills

Follow these steps to configure OKTA and integrate it with MuchSkills

‍

Step 1: OKTA Setup

Create an Application in OKTA

1. Log in to your OKTA Admin Portal.
2. Go to Applications and click Create App Integration

‍

3. Select API Services as the application type

‍

4. Name the application “MuchSkills” and click Next.

Step 2: Obtain Credentials from OKTA

Client ID

1. Once the app is created, you will see a Client ID.
2. Copy the Client ID, which you will later paste into MuchSkills.

Domain

1. Your unique OKTA subdomain is visible at the top right of the OKTA admin dashboard (e.g., companyname.okta.com).
2. Copy this subdomain for use in MuchSkills.

Private Key

1. In OKTA, navigate to Client Credentials.
2. Select Public Key/Private Key and click Edit.

‍

3. Scroll down and click Add Key to generate a new key pair.

‍

‍

4. Copy the Private Key from the JSON output for later use in MuchSkills.

‍

Step 3: Paste data into MuchSkills

1. In MuchSkills, go to Team Settings, then Integrations, and select OKTA.
2. Paste the Client ID, Domain, and Private Key you obtained earlier into the appropriate fields.

‍

3. Don't press connect yet. Instead continue with the steps below.

Step 4: Grant API Scopes in OKTA

1. In the OKTA Admin Portal, go to API Scopes.
2. Grant the following scopes:‍
   • okta.groups.read: Allows the app to read group information.‍
   • okta.users.read: Allows the app to read user data from the OKTA directory.

3. Click Grant for both scopes.

Note: It may take a few minutes for the scopes to update.

‍

Step 5: Disable Proof of Possession (DPoP)

• Go to your Okta app.
• Navigate to General > General Settings.
• Uncheck “Proof of possession”.

‍

Step 6: Assign the Required Admin Role

• Open the Admin Roles tab.
• Click Edit assignments.
• Assign the API Access Management Administrator role.

If this role is unavailable in your plan, the Application Administrator role can be used instead. It provides the necessary level of access.

‍

Step 7: Group Synchronization

• In OKTA, go to Groups and create a new group called “MuchSkills” or select an existing group.

• Assign the users you want to synchronize with MuchSkills to this group.

• The group will be ready for synchronization with MuchSkills once the application is fully configured. Go back to MuchSkills, click Connect and set up the syncronisation.

Step 8: Optional - Add Custom Fields

If you have custom data (such as a full country name or a profile photo) that is not available by default, you can add custom fields:

1. In OKTA, go to the Profile Editor.
2. Edit the User Type and add any custom fields as needed.
3. Example: Add a field called Country with a variable name country for a full country name.
4. Add a field for Photo if you want to sync profile images.
5. Save the changes. These fields will now be synchronized with MuchSkills as part of the user profile.

Final Step: Testing and Verifying

• Ensure that the groups and users are properly synchronized by checking user profiles in MuchSkills.
• If necessary, manually trigger a synchronization to verify that the custom fields are being imported correctly.
• The synchronization will run automatically every 30 minutes, keeping your OKTA directory up to date in MuchSkills.

Video instructions

‍