Setting up Visual Paradigm Online with Okta

Visual Paradigm Online ("VP Online") supports Okta for Enterprise clients. In this article we will go into the details of setting up SAML authentication through Okta. Although this is specific to Okta the concepts could be adapted to any other SAML Identity Provider.

Step 1 - Setting up Okta

In this section you will learn how to create a new application integration in Okta.

Part of the setup of Okta requires providing details given by VP Online. So now, open a web browser and login VP Online as manager.
Click on your logo at the top right of the page and then select Administration from the drop down menu.
Select System Tools from the menu on the left hand side.
Open the Single Sign-On tab and keep it opened. We will come back later.

The Single Sign-On page of VP Online
Open another tab/window in the web browser and visit Okta.
Create a new application integration in Okta. Select SAML 2.0 as sign-on method.

Creating an application with SAML 2.0 as sign on method
Enter VPository as the name of application. Click Next.

Entering application name
Fill-in the SAML settings. Copy the value of Single Sign-on (ASC) URL from VP Online to Okta as the Single sign on URL, and then copy the value of Audience URI (SP Entity ID) from VP Online to Okta.

Filling in SAML settings
Click Next.
Select I'm an Okta customer adding an internal app and then click Finish.

Choosing identity
Download the Identity Provider metadata under the Sign On tab.

Download Identity Provider metadata
Open the People tab.
Click Assign to People and then assign the application to people who will use VP Online. Doing so does not instantly grant those people the accessibility to VP Online. You still have to go through the process of inviting them to VP Online, which will be mentioned in the next section.

Assigning VPository (application) to people
Click Done when finished.

Step 2 - Setting up VP Online

Go back to VP Online. You should be opening the Single Sign-On tab of the System Tools page. Now, enter Okta as the Identity Provider (IDP) Name.

IDP name entered
In the IDP metadata field, upload the Identity Provider metadata file downloaded in the previous section.

IDP metadata uploaded
Click Apply.
Click OK when you are prompted for confirmation. If sign-in success, you will be logged out automatically. If failed, please make sure the VPository application has been assigned to you in Okta, and try again.
From now on, VP Online is integrated with Okta. You, as the manager can access VP Online with your Okta account and perform administration and management tasks. Team members, once being invited and have accepted the invitations, can login VP Online from Visual Paradigm with their Okta account.

Login with Okta

Step 3 - Member management

Since the integration with Okta, in order for someone to become a VP Online member, he/she has to:

Be a person who have been assigned the VP Online application in Okta and,
Have accepted the invitation sent from VP Online manager.

The first point has been covered in step 1 above. In this section we are going to show you how to invite a member.

Open a web browser and login VP Online as manager.
Click on your logo at the top right of the page and then select Administration from the drop down menu.
Select Members from the menu on the left hand side.
Under the Members tab, click Invite Member.

Invite member
Enter the name and email of the members. Make sure you have already assigned the VPository application to them in Okta. If not, they won't be able to access any projects. Click Send Invitation.

Send invitation
The invitee will receive an invitation shortly. Click on the activation link in the email.

To activate VP Online account
He/she will be redirected to a web page where he/she can fill in his name. Enter the name and click Activate with Okta.

Activating VP Online account

If success, he will see the Congratulations screen. From now on, he/she can access VP Online from Visual Paradigm with his/her Okta account.

Activation success