Configuring Single Sign-On for Trust Centers

The first step to configuring Trust Centers for SSO authentication is to create a web application in your IdP. When creating the web application in your IdP, you must ensure that OpenID Connect (OIDC) is selected as the sign on method. Once you've created the web application in your IdP, you will then proceed to configure SSO in the OneTrust application.

Next, you will need to enable Single Sign-On for the Trust Center and begin configuring details regarding your IdP in the OneTrust application.

1. On the Trust Center menu, select Portals. The Trust center portals screen appears.

2. Click the link in the Name column for the Trust Center for which you want to enable SSO. The Builder tab on the Trust Center details screen appears.

3. Navigate to the Authentication tab.

4. Enable the Enable Single-Sign On to Trust Center setting. The Identity Provider Configuration field appears.

   

5. Click the Identity Provider Configuration field, and select the Add New option. The Add new identity provider modal appears.

   

   Field

   Description

   Identity Provider Name

   Enter a name to identify the IdP configuration that you are setting up.

   Base URL

   Enter the URL for the authorization server. This URL can be found within your IdP.

   For example, you would copy the value in the Issuer URI field in Okta and paste the copied value in this field.

   Note:

   Depending on your IdP, the name of the field that contains the URL for the authorization server may vary.

6. Complete the fields, as necessary.

7. Click the Confirm and Add button.

Once you add your IdP configuration within the Authentication tab, you need to safelist the Trust Center URL in your IdP.

1. On the Authentication tab within your Trust Center, navigate to the Identity provider configuration field and click the Manage config button. The Setup and configure SSO modal appears.

2. Click the Copy link button. This will copy the URL for the Trust Center, which you will add within your IdP.

   
   
   

3. In your IdP, paste the copied Trust Center URL in the redirect URL field for the web application you created. This will safelist the Trust Center URL for redirection, which means that your IdP will redirect users to this URL once they have been authenticated via SSO.

   For example, you would paste the copied Trust Center URL in the Login Redirect URL field in Okta. Then, once Okta authenticates a user's sign in request, the user will be redirected to the Trust Center.

   Note:

   Depending on your IdP, the name of the redirect URL field may vary.

Lastly, enter your authentication credentials for your IdP within the Require Authentication Credentials section of the configuration in the OneTrust application.

1. Navigate back to the Setup and configure SSO modal on the Authentication tab for the Trust Center.

2. Click the Next button. The Required Credentials section appears.

3. Complete the fields in the Required Credentials section.

   
   
   

   Field

   Description

   Grant type

   Authorization Code is currently the only supported grant type and is selected by default.

   Client ID

   Copy the Client ID from the Client Credentials found within your IdP and paste the copied value in this field.

   Client secret

   Copy the Client Secret from the Client Credentials found within your IdP and paste the copied value in this field.

4. Click the Save configuration button.