Okta Identity Engine - IdP MFA Setup Guide

Setup Steps

1. In My OPSWAT Central Management, navigate to Secure Access > Access Methods > IdP MFA, and Enable IdP MFA

2. Copy the Entity ID, Single Sign-On Url, and download the IdP Certificate. Then navigate to your Okta Administrator account.
3. In Okta Admin, go to “Security > Identity Providers“ to setup OPWAT’s Compliance-Based IdP MFA

4. Add Identity Provider, select “SAML 2.0 IdP“ and click "Next" button

5. Fill in the information with the provided metadata from My OPSWAT Central Management

6. Keep the default configurations in the Advanced Settings
7. Download the SAML metadata of the new IdP

_

8. Upload the Okta Metadata in My OPSWAT Central Management and Save

9. In Okta, navigate to Security > Authenticators > Setup and click "Add authenticator"

9. In the Security > Authenticators, select Enrollment tab and add a new My OPSWAT Central Management policy

• It's recommended to assign none-admin group in this policy before testing all the configuration and flow.
• Need to require "My OPSWAT Central Management (IdP)" and "Password" and disable other authenticators
• Keep the default rule

10. Configure your Global Session Policy.

• It's recommended to assign to a none-admin group before testing the flow and policy
• It's recommended to require MFA at every sign in

11. Test your integration