# Setup

Support for other authentication providers coming soon! Please contact us to request support for your organization's authentication provider.

{% content-ref url="/pages/n7BtlSv9JlpJ0wVMQOSI" %}
[Okta](/setup/okta)
{% endcontent-ref %}


# Okta

{% content-ref url="/pages/qZyCHYPQdqfzEZ7hAz6b" %}
[Access Your Domain](/setup/okta/access-your-domain)
{% endcontent-ref %}

{% content-ref url="/pages/8vy84uaCY7BjIukK4UhX" %}
[Create an App Integration; Access Your Client ID and Client Secret](/setup/okta/create-an-app-integration-access-your-client-id-and-client-secret)
{% endcontent-ref %}

{% content-ref url="/pages/I5UJpORacA60Xaov5CYb" %}
[Add a User](/setup/okta/add-a-user)
{% endcontent-ref %}


# Access Your Domain

* [ ] Log in to Okta
* [ ] Click the account dropdown menu located in the top-right corner of your window
* [ ] Your organization's Okta domain will appear in the dropdown menu

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2FoKX8BzOj0yafVCqShohU%2Fimage.png?alt=media&amp;token=3a80f935-a40b-434c-8117-9a56fcc82eb6" alt=""><figcaption></figcaption></figure>


# Create an App Integration; Access Your Client ID and Client Secret

* [ ] Log in to Okta
* [ ] Navigate to the Applications page by clicking the "Applications" dropdown menu in the navigation bar on the left side of your window and then clicking the "Applications" dropdown item

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2FVgLGG7CXFrIBZmAc2pZS%2Fimage.png?alt=media&amp;token=4c8d2220-01ef-4f55-9dcc-8e97472cac99" alt=""><figcaption></figcaption></figure>

* [ ] Create a new app integration by clicking the "Create App Integration" button

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2FFXOiydHdIBtjpD1GU4O3%2Fimage.png?alt=media&amp;token=7514e30a-8250-45d5-ae5e-30aad6a3b173" alt=""><figcaption></figcaption></figure>

* [ ] Choose "OIDC - OpenID Connect" as the sign-in method and "Web Application" as the application type for your app integration and click the "Next" button to proceed to the next page

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2FGfdaZRWCmqiUHHVGyMhM%2Fimage.png?alt=media&amp;token=215b9f7b-6eab-4112-b94c-28ec09588dfd" alt=""><figcaption></figcaption></figure>

* [ ] Select the "Client Credentials" and "Authorization Code" grant types and enter *<https://eva.foxio.io/callback>* as the sign-in redirect URI

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2Fal4SsjY9i8eCV2fnRlsT%2Fimage.png?alt=media&amp;token=edf05072-7c5f-49e8-b862-44f4828d2822" alt=""><figcaption></figcaption></figure>

* [ ] Configure the other settings for your app integration and click the "Save" button to create your app integration
* [ ] The Client ID for the app integration you created for EVA will appear in the "Client Credentials" section of the "General" tab of the details view for the application

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2Fm5px9pgv1QcRRaZSL8Tz%2Fimage.png?alt=media&amp;token=eabb1698-f019-4dea-ae83-1d93038403da" alt=""><figcaption></figcaption></figure>

* [ ] The Client Secret for the app integration you created for EVA will appear in the "Client Credentials" section of the "General" tab of the details view for the application

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2FPaA5GAS9QEAHmD3tPT3b%2Fimage.png?alt=media&amp;token=ed38063c-01a8-460e-97d8-7e66bf72567c" alt=""><figcaption></figcaption></figure>

* [ ] Ensure that the Okta Authorization Server you plan to use with EVA is equipped with an Access Policy and associated Policy Rule(s) that permit your organization's users to authenticate themselves when redirected to Okta from EVA. To learn more about Access Policies and how to create one, if needed, [read Okta's docs](https://developer.okta.com/docs/guides/configure-access-policy/main/).


# Add a User

* [ ] Log in to Okta
* [ ] Navigate to the People page by clicking the "Directory" dropdown menu in the navigation bar on the left side of your window and then clicking the "People" dropdown item

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2FAhu9l9zeHcz7gjVki9nP%2Fpeople.png?alt=media&amp;token=bf16d29a-87c1-41d1-92a7-9df6b67c74f2" alt=""><figcaption></figcaption></figure>

* [ ] Add a new user by clicking the "Add Person" button
* [ ] Enter the information for the new user and click the "Save" button to add them

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2Fu9xKCvDvtK7YZWsjHJqK%2Faddperson.png?alt=media&amp;token=2cd26194-f424-44ab-bf07-4614bec8cc31" alt=""><figcaption></figcaption></figure>


# Determine How Often to Prompt Users for Re-Authentication or Multi-Factor Authentication

By default, Okta will utilize session cookies to automatically authenticate users when they are redirected to Okta from EVA. If your organization's use case for EVA necessitates overriding this out-of-the-box behavior, follow these steps to instruct Okta how often users are required to re-authenticate or complete multi-factor authentication when signing in:

* [ ] Log in to Okta
* [ ] Navigate to the Applications page by clicking the "Applications" dropdown menu in the navigation bar on the left side of your window and then clicking the "Applications" dropdown item

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2FVgLGG7CXFrIBZmAc2pZS%2Fimage.png?alt=media&amp;token=4c8d2220-01ef-4f55-9dcc-8e97472cac99" alt=""><figcaption></figcaption></figure>

* [ ] Select the app integration you created for EVA
* [ ] Navigate to the "Sign On Policy" section of the "Sign On" tab of the details view for the application

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2FZyIXiem3011kweAYjhAk%2Fsign_on_policy.png?alt=media&amp;token=b2b46572-8a4c-438e-9c76-2c064d45cd26" alt=""><figcaption></figcaption></figure>

* [ ] Add a new application sign-on rule by clicking the  "Add Rule" button

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2FLdIPvGsCL7f1KYA0Dt9h%2Frule.png?alt=media&amp;token=42847428-9706-495e-a6b8-c4c8ba330b4e" alt=""><figcaption></figcaption></figure>

* [ ] If you want to determine how often Okta prompts users to re-authenticate themselves when redirected from EVA, select the "Prompt for re-authentication" option and enter a timeout duration appropriate for your use case

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2FtZnDeEC5xPZMkdXYzRtl%2Fre_authentication.png?alt=media&amp;token=64cb6384-4318-4c63-9d87-0540a48813d4" alt=""><figcaption></figcaption></figure>

* [ ] If you want to determine how often Okta prompts users to complete multi-factor authentication when redirected from EVA, select the "Prompt for factor" option and choose an interval appropriate for your use case

<figure><img src="https://1241417653-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7MEV3YD5FckSdVnwBnCG%2Fuploads%2FmZ98pLIy7wUkBTvjeHFE%2Ffactor.png?alt=media&amp;token=71b09d84-eb5f-477f-87f5-1a77b8e129fb" alt=""><figcaption></figcaption></figure>

* [ ] Configure the other settings for your application sign-on rule and click the "Save" button to create your rule


# Contact Us

Reach out to us at <support@foxio.io> if you have any issues with our products.