Okta Integration

Okta Integration with TigerTrust

TigerTrust integrates with Okta to provide enterprise identity management for your certificate lifecycle management platform. Enable single sign-on, automate user provisioning, and enforce security policies through Okta.

SAML SSO Configuration

Configure SAML 2.0 SSO in Okta:

yaml
1# TigerTrust SAML Configuration
2saml:
3  provider: okta
4  entity_id: https://tigertrust.io/saml/metadata
5  acs_url: https://api.tigertrust.io/auth/saml/callback
6
7  attribute_mapping:
8    email: user.email
9    firstName: user.firstName
10    lastName: user.lastName
11    groups: groups
12
13  signing:
14    algorithm: RSA-SHA256
15    certificate: |
16      -----BEGIN CERTIFICATE-----
17      MIIDpTCCAo2gAwIBAgIGAY...
18      -----END CERTIFICATE-----

Okta Admin Configuration

1. Add TigerTrust as a new application
2. Configure SAML settings:

text
1Single Sign-On URL: https://api.tigertrust.io/auth/saml/callback
2Audience URI: https://tigertrust.io/saml/metadata
3Name ID Format: EmailAddress
4Application username: Email

3. Add attribute statements:

SCIM Provisioning

Enable automated user provisioning:

yaml
1# TigerTrust SCIM Configuration
2scim:
3  enabled: true
4  base_url: https://api.tigertrust.io/scim/v2
5
6  features:
7    create_users: true
8    update_users: true
9    deactivate_users: true
10    sync_groups: true
11
12  attribute_mapping:
13    userName: email
14    name.givenName: firstName
15    name.familyName: lastName
16    active: isActive
17    groups: roles

Group-Based Role Assignment

Map Okta groups to TigerTrust roles:

yaml
1# Role mapping configuration
2role_mapping:
3  groups:
4    - okta_group: "TigerTrust Admins"
5      tigertrust_role: admin
6      permissions:
7        - manage_certificates
8        - manage_users
9        - manage_policies
10        - view_audit_logs
11
12    - okta_group: "Certificate Operators"
13      tigertrust_role: operator
14      permissions:
15        - manage_certificates
16        - view_certificates
17        - renew_certificates
18
19    - okta_group: "Certificate Viewers"
20      tigertrust_role: viewer
21      permissions:
22        - view_certificates
23        - view_reports

MFA Enforcement

Configure MFA for sensitive operations:

yaml
1# MFA policy in TigerTrust
2mfa:
3  provider: okta
4
5  triggers:
6    - action: revoke_certificate
7      require_mfa: always
8
9    - action: delete_certificate
10      require_mfa: always
11
12    - action: modify_policy
13      require_mfa: always
14
15    - action: export_private_key
16      require_mfa: always
17      allowed_factors:
18        - webauthn
19        - okta_verify_push

Adaptive Authentication

Leverage Okta's adaptive authentication:

yaml
1# Adaptive authentication configuration
2adaptive_auth:
3  risk_levels:
4    low:
5      actions:
6        - standard_access
7
8    medium:
9      actions:
10        - step_up_mfa
11
12    high:
13      actions:
14        - deny_access
15        - notify_security_team
16
17  factors:
18    device_trust:
19      required_for: [production_access]
20    network_zone:
21      corporate_only: [admin_actions]

User Lifecycle Management

Automate user lifecycle:

yaml
1# Lifecycle events
2lifecycle:
3  on_user_create:
4    - assign_default_role
5    - send_welcome_email
6    - create_audit_entry
7
8  on_user_deactivate:
9    - revoke_active_sessions
10    - transfer_certificate_ownership
11    - archive_user_data
12    - create_audit_entry
13
14  on_user_reactivate:
15    - restore_role_assignments
16    - notify_user
17    - create_audit_entry

API Access Management

Secure API access with Okta:

yaml
1# OAuth 2.0 configuration for API access
2oauth:
3  authorization_server: https://your-org.okta.com/oauth2/default
4
5  scopes:
6    - certificates:read
7    - certificates:write
8    - policies:read
9    - policies:write
10
11  token_validation:
12    issuer: https://your-org.okta.com/oauth2/default
13    audience: https://api.tigertrust.io

Secure your certificate management with enterprise identity management through TigerTrust and Okta.