# Okta

## Overview

HPE Morpheus Enterprise allows users to integrate an Okta deployment for user management and authentication. In HPE Morpheus Enterprise, identity sources are added on a per-Tenant basis and Morpheus allows you to map Okta user groups to HPE Morpheus Enterprise user groups. User accounts are automatically created with matching metadata and role permissions when users are authenticated.

## Adding an Okta Integration

### Procedure

1. Navigate to Administration > Tenants
2. Select a Tenant
3. Select IDENTITY SOURCES
4. Select + IDENTITY SOURCE
5. Choose TYPE: “Okta”
6. Populate the following, then select SAVE CHANGES:

### Results

Name
:   Unique name for authentication type

Description
:   A description for your new Okta Identity Source

Okta URL
:   Your Okta URL

Administrator API Token
:   Your Okta Administrator API Token

Required Group
:   The Okta group that users must be in to have access (optional)

Default Role
:   The default role a user is assigned if no group is listed under an Okta user that maps within the Morpheus Role Mappings section

ENABLE ROLE MAPPING PERMISSION
:   When selected, Tenant users with appropriate rights to view and edit Roles will have the ability to set role mapping for the Identity Source integration. This allows the Tenant user to edit only the role mappings without viewing or potentially editing the Identity Source configuration.

MANUAL ROLE ASSIGNMENT
:   When selected, administrators can manually edit Roles for users created through this identity source integration from the user detail page (Administration > Users > Selected user).

NOTE

For more on Identity Source role mapping permissions, see the [associated guide](https://support.morpheusdata.com/s/article/How-to-enable-Subtenant-admins-to-edit-Identity-Source-role-mapping?language=en_US) in our KnowledgeBase.

Now, allowed Okta users can log into HPE Morpheus Enterprise via their Okta credentials and a user will be automatically generated within HPE Morpheus Enterprise with matching metadata and mapped Role permissions.

NOTE

If you’ve created multi-tenant roles, these will also appear here and can be mapped to Okta user groups allowing you to map users to equivalent user groups in HPE Morpheus Enterprise.
