Getting started with Okta/Auth0 to integrate third party IDP in our SaaS

Get Help
,
1

Hi all,

Our clients are asking us if they can log into our apps using their Okta IDP. They’re asking specifically about SAML integration, but I’m not sure if that’s a hard requirement.

I’ve had an Okta/auth0 representative on the phone who told me there are two options

  • be part of the Okta Integration Network
  • use Auth0 to integrate their IDP

The sales rep told me that if we used the latter, we would need to subscribe to Auth0 and migrate all our users there. We are currently using Keycloak for identity and access management.

I’m not sure about a few things

  • what is the preferred approach for that use case (OIN, Auth0)
  • can we really not use Auth0 as external IDP as suggested by the rep ? Because my understanding is that this should be possible

Any help would be greatly appreciated :slight_smile:

3

Hi @7hibault

Welcome to the Auth0 Community!

I am a little confused regarding the requirements that your client has, if I am wrong about anything, feel free to correct me and let me know!

So, as far as I understand, the client requires you to integrate a connection in your application in order to log in via their OKTA IdP. What do you mean by the OKTA IdP? Is the IdP Okta (as in an Okta Workforce connection) or do they have a 3rd party IdP set up through Okta?

If you would need to integrate the 3rd party IdP within Auth0 as a SAML connection, that is possible by creating a custom SAML Enterprise Connection within the Dashboard. However, as you have been advised, this is a feature available through an Enterprise Plan, this also covers the use of your own Database in order to migrate users to Auth0.

A custom database would be required if you want to either use Keycloak’s stored users or to migrate the users to Auth0.
You can read more about that on our pricing page.

  • what is the preferred approach for that use case (OIN, Auth0)

Since your application would be an SaaS B2B one as far as I understand, Both OIN and Auth0 would be suitable on the matter. It would really come down to what specific conections does your application requires and if the integrations are available/possible within the platform.

  • can we really not use Auth0 as external IDP as suggested by the rep ? Because my understanding is that this should be possible

Yes, you can set up Auth0 to be an external IdP for your application.

If you need extra clarification about anything, if I missed something or if you have extra questions, please let me know!

Kind Regards,
Nik