Question:

Answer: 

1. Log into the Okta Admin Console and click Applications on the left hand side. 
   
2. On the right hand side, select the name of your Application. We are using an Application called Digital Hive. Click the Sign On tab. 
   
3. Under Settings, scroll down and look for Attribute Statements. Expand Show legacy configuration 
   
4. You will see Profile and Group Attribute Statements. We will need to add this under the Group Attribute Statement. Under Name add members, Name format can be unspecified and Filter matches regex with .* . Click Save. 
   
   
5. The next step would be to create Okta Groups. 
   
6. On the left hand side, expand Directory and click Groups. 
   
7. Click "Add Group" and create a New group. Chand-Test is the name of the group we use in this. Please create the group name in upper case letters (CHAND-TEST). This is because of a known issue that will be fixed in a later release. 
   
8. Open the Chand-Test group and "Assign People" to it. I have added 2 users to it. 
   
9. Navigate to the Digital Hive install directory and look for the theia.properties file (C:\DigitalHive\app\node1\tomcat\conf) and add the following lines to it:
   

   #---SAML metadata url setting---

   saml.idp.metadata.url=https://integrator-5386109.okta.com/app/exkzsul8i9M8At2XB697/sso/saml/metadata

   saml.sp.entity.id=chand-digitalhive

   saml.username.attribute.name=email

   saml.authorities.attribute.name=members
   

10. The next step would be to configure the Role Mapping within Digital Hive. Log into portal and click "Manage Digital Hive" under your Name Avatar. 
    

11. Navigate to Security, followed by Roles.
    
    

12. In our example, We are using the Authors role. Click and open it and map the Okta group under Users/Groups to get this role. You will notice our group called Chand-Test added there. 
    

13. You can now ask a user to log in and test if the security is enabled correctly.