Configuring Okta Workforce Identity Cloud

This section describes the steps to be performed in the Okta Workforce Identity Cloud administration to register the Central NAC application and provide access to the Okta Workforce Identity Cloud instance.

To configure Okta Workforce Identity Cloud as an identity provider, you must install the following applications:

• Cloud Auth OIDC

• Cloud Auth API Service

Cloud Auth OIDC

To install the Cloud Auth OIDC application, complete the following steps:

1. Log in to the Okta Workforce Identity Cloud administration console.

2. Navigate to the Applications tab and click Applications.

3. Click Browse App Catalog.

4. Select OIDC in the Functionality section.

5. Search for Cloud Auth OIDC and select the Cloud Auth OIDC application.

6. Select Add Integration and click Done.

7. Select Sign On.

8. In the Settings section select Edit.

9. Scroll down to the Advanced Sign-on Settings.

10. Copy the Redirect URI obtained from the Central NAC identity store and paste it in the Redirect URI field which is located above the help text. For more information, see Copy Redirect URI.

11. In the Credentials Details section, for Application username format, select Email.

12. Click Save.

For the Cloud Auth OIDC application to authenticate a user, the user must be assigned the application. For more information about how users are assigned to applications, see https://help.okta.com/en-us/content/topics/users-groups-profiles/usgp-assign-apps.htm.

Cloud Auth API Service

To install the Cloud Auth API Service application, complete the following steps:

APIs for Okta Workforce Identity Cloud

The following Okta core APIs are used by Central NAC to authorize users in Okta Workforce Identity Cloud:

• GET /api/v1/users/${userId}

• GET /api/v1/users/${userId}/groups

• GET /api/v1/groups