We will create two applications:
The first application âRiot Adminâ will allow administrators to connect to https://hub.tryriot.com. This application should only be assigned to Riot administrators.
The second application âRiot Employee Portalâ will allow all employees to connect to their personal employee portal at https://portal.tryriot.com. This application can be assigned to all Okta users.
âś Configuring the Riot Admin application
Connect to your Okta Admin Console, and in the left menu, go to Applications > Applications
Click on the button âCreate App Integrationâ.
Select âOIDC - OpenID Connectâ for the Sign-in method, and select âWeb Applicationâ for the Application type.
Click âNextâ.
Enter âRiot Adminâ for the App integration name.
Enter https://api.tryriot.com/v2/hub/connect/oidc/callback for the Sign-in redirect URIs.
Click the small cross next to the URL in the section Sign-out redirect URIs to remove it.
If you already have a specific group containing all the persons who should have access to the Riot administration, choose âLimit access to selected groupsâ in the Assignments, Controlled access section, and select the group you want to use. Otherwise, you can choose âSkip group assignment for nowâ and do the assignments later.
Click âSaveâ.
Your application is now created.
On this page, you can retrieve the three values you will need to enter on the Riot platform:
The Client ID can be found in the Client Credentials section, and has a button to be copied easily.
The Client Secret can be found in the Client Secrets section, and also has a button to be copied easily.
Finally, your Okta URL can be found in the menu at the top right of the screen.
Put these values in the Riot platform in the corresponding fields.
We still need to adjust some additional settings to support connecting to Riot from the Okta dashboard directly. In General Settings, click on the âEditâ button, and in the LOGIN section, choose the following settings:
Login initiated by: Either Okta or App.
Application visibility: Enable âDisplay application icon to usersâ.
Login flow: Redirect to app to initiate login (OIDC Compliant).
Initiate login URI: Enter https://api.tryriot.com/v2/hub/connect/oidc/idp-initiate
Click âSaveâ.
Assignments
If you skipped the assignments before, you can do them now in the Assignments tab. You can either create a group dedicated to Riot administrators and assign this group, or assign some Okta users directly, or mix and match to fit your use-case.
In this example, we will use a group named âRiot Administratorsâ, which was created previously.
Go to the Assignments tab.
Click âAssignâ, and click âAssign to Groupsâ.
Search for your group using the search input.
Click âAssignâ on the corresponding group.
And finally, click âDoneâ.
The first application is now properly configured and should appear on the Okta dashboard for assigned users.
⡠Configuring the Riot Employee Portal application
Connect to your Okta Admin Console, and in the left menu, go to Applications > Applications
Click on the button âCreate App Integrationâ.
Select âOIDC - OpenID Connectâ for the Sign-in method, and select âWeb Applicationâ for the Application type.
Click âNextâ.
Enter âRiot Employee Portalâ for the App integration name.
Enter https://albert.tryriot.com/portal/auth/oidc/callback for the Sign-in redirect URIs.
Click the small cross next to the URL in the section Sign-out redirect URIs to remove it.
In the Assignments > Controlled access section, you can select âAllow everyone in your organization to accessâ. If you prefer to try this with a small group of users first, you can select a specific group instead, or skip assignments and configure them later.
Click âSaveâ.
Your application is now created.
On this page, you can retrieve the three values you will need to enter on the Riot platform:
The Client ID can be found in the Client Credentials section, and has a button to be copied easily.
The Client Secret can be found in the Client Secrets section, and also has a button to be copied easily.
Finally, your Okta URL can be found in the menu at the top right of the screen.
Put these values in the Riot platform in the corresponding fields.
We still need to adjust some additional settings to support connecting to Riot from the Okta dashboard directly. In General Settings, click on the âEditâ button, and in the LOGIN section, choose the following settings:
Login initiated by: Either Okta or App.
Application visibility: Enable âDisplay application icon to usersâ.
Login flow: Redirect to app to initiate login (OIDC Compliant).
Initiate login URI: Enter https://albert.tryriot.com/portal/auth/oidc/idp-initiate
Assignments
If you skipped the assignments before, you can do them now in the Assignments tab. You can either assign this app to all user if you are onboarding all your employees on Riot, or create a group dedicated to the employees being onboarded and assign this group, or assign some Okta users directly, or mix and match to fit your use-case.
The second application is now properly configured and should appear on the Okta dashboard for assigned users.