Okta IdP-Initiated flow for Dashboard SSO

This article provides a solution for an issue where users attempting to sign in to the Auth0 Dashboard from the Okta dashboard using Single Sign-On (SSO) receive an error. After the user selects the Auth0 application chiclet, the following error message appears:

Oops! Something went wrong

• Auth0

• Okta

• Dashboard Single Sign-On (SSO)

• Security Assertion Markup Language (SAML)

The error occurs because a true Identity Provider (IdP)-initiated flow is not supported for Auth0 Dashboard SSO. The integration simulates this experience using a Service Provider (SP)-initiated process that seamlessly directs the user to the IdP.

To resolve this issue, configure a Bookmark App in Okta to simulate the IdP-initiated flow.

1. In the Okta admin console, hide the SAML application created for the Auth0 SSO integration from end-users.

2. Configure the SAML application (the one hidden from users) with the callback URL in all required fields: https://auth0.auth0.com/login/callback. This application is necessary for the SSO integration to function but is not used for initiating the sign-in.

3. Create a new Bookmark App in Okta. Users will select this application to sign in.

4. Set the URL for the new Bookmark App to point to the Auth0 Universal Login page with the specific connection. Replace <assignedConnectionName> with the name of the SSO connection: https://manage.auth0.com/login?connection=<assignedConnectionName>

   • When a user selects this bookmark, they are directed to the Auth0 URL, which immediately redirects them to Okta for authentication. This process simulates an IdP-initiated flow.

NOTE: This configuration operates independently of Home Realm Discovery (HRD). HRD is a separate feature that redirects users to Okta when they sign in from Auth0.com using a company email associated with the domain.