SUMMARY
After enabling SAML with OKTA the Strategy Administration pane is not accessible and shows below message:
CAUSE
OKTA and/or Tomcat are not properly configured to allow access Web Administrator.
ACTION
There are 2 different approaches that can be considered moving forward:
1. Use Okta to authenticate users to access the Web Administration page. For this approach, Okta will need to be configured to pass the users' group membership correctly. At the moment, probably, no group memberships are passed from Okta in the SAML assertion. This is likely due to the Groups attribute regular expression on Okta side and will need to be reviewed by the Okta team.
Using Okta to authenticate users for the Web administration page requires to uncomment the security:intercept-url for mstrWebAdmin, taskAdmin and taskViewer (currently it is commented out) in
SpringSAMLconfig.xml, and comment out the security-constraint in
web.xmlfor the same servlets listed above.
SpringSAMLconfig.xmland uncomment the security constraint in
web.xml.
