# Okta Workforce IdP in Auth0 for SPA

**URL:** <https://community.auth0.com/t/okta-workforce-idp-in-auth0-for-spa/131913>\
**Category:** Get Help\
**Tags:** oidc-enterprise-connection, connections\
**Created:** [April 12, 2024, 11:41pm UTC](https://community.auth0.com/t/okta-workforce-idp-in-auth0-for-spa/131913 "2024-04-12T23:41:48Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ricky2](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ricky2/32/56385_2.png) [@ricky2](https://community.auth0.com/u/ricky2)\
**Post date:** [April 12, 2024, 11:41pm UTC](https://community.auth0.com/t/okta-workforce-idp-in-auth0-for-spa/131913/1 "2024-04-12T23:41:48Z")

</div>

Hi, I am currently using Auth0 for user authentication in my React application. I am looking to integrate Okta Workforce within Auth0 as an Enterprise connection. However, in the connection page it is asking for a client secret but in my Okta Admin Dashboard I only see the client ID. From what I can find, SPA apps for Okta do not have a client secret. Is the alternative to integrate Okta as a SAML IdP for Auth0?

How exactly would the sign in experience work with Okta SAML IdP? Currently I am using Auth0’s Classic Universal login with a custom domain. Would users see Okta as a login option (similar to Social Sign Ons)?

Appreciate the help!

---

<div class="post-metadata">

**Author:** ![marcelina.barycka](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/marcelina.barycka/32/56162_2.png) [@marcelina.barycka](https://community.auth0.com/u/marcelina.barycka)\
**Post date:** [April 17, 2024, 12:35pm UTC](https://community.auth0.com/t/okta-workforce-idp-in-auth0-for-spa/131913/3 "2024-04-17T12:35:07Z")

</div>

Hey there @ricky2 , welcome to the Auth0 by Okta Community!

Thanks for your interest in integrating Okta as one of the available connections on your Auth0’s Classic Universal login widget.

> [@ricky2](#):
>
> How exactly would the sign-in experience work with Okta SAML IdP?

There are two options on how to set it up on the Auth0 side:

1. Home Realm Discovery: this doesn’t cover any additional button on the Auth0’s Login widget. Once a user provides their email address, they will be automatically redirected to the SAML IdP( if there is a domain match). If there is no match, Auth0 will prompt them to provide a password (for a regular Auth0 database connection).

2. Adding a button for the SAML IdP on the Auth0’s Login widget to be chosen by users.

Please let me know if there are any other questions on that!

Feel free to test the solution with free Okta and Auth0 accounts by assigning a test user to the Okta integration.  
Here is a Knowledge Solution to that: [SAML setup OKTA as Idp and Auth0 as SP](https://community.auth0.com/t/saml-setup-okta-as-idp-and-auth0-as-sp/91164).  
Error messages that appear during the connection test should give additional direction on troubleshooting.

---

<div class="post-metadata">

**Author:** ![ricky2](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ricky2/32/56385_2.png) [@ricky2](https://community.auth0.com/u/ricky2)\
**Post date:** [April 25, 2024, 4:47pm UTC](https://community.auth0.com/t/okta-workforce-idp-in-auth0-for-spa/131913/4 "2024-04-25T16:47:14Z")

</div>

Appreciate the response and explanation!

After scouring the docs, I’ve come to the conclusion that my only option was to use SAML connection to connect to Okta and that the Okta Workforce Connector only works for Web Applications and not SPAs.

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [May 9, 2024, 4:47pm UTC](https://community.auth0.com/t/okta-workforce-idp-in-auth0-for-spa/131913/5 "2024-05-09T16:47:32Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

---

<div class="post-metadata">

**Author:** ![ale.vesga1](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ale.vesga1/32/60921_2.png) [@ale.vesga1](https://community.auth0.com/u/ale.vesga1)\
**Post date:** [December 7, 2024, 1:25am UTC](https://community.auth0.com/t/okta-workforce-idp-in-auth0-for-spa/131913/6 "2024-12-07T01:25:44Z")

</div>

I would recommend using the Okta Workforce Enterprise Connection, refer to my explanation below:

> [@Okta Workforce Enterprise Connection for SPA](https://community.auth0.com/t/okta-workforce-enterprise-connection-for-spa/157619):
>
> I tried to follow [the documentation page](https://auth0.com/docs/authenticate/identity-providers/enterprise-identity-providers/okta) to setup an enterprise connection for a SPA, but when I went through Select Web application as the Application type since there is a “SPA” application type selectable, I suspected I was reading the wrong guide, so I searched something useful on Auth0 documentation and community and I found just [this community post](https://community.auth0.com/t/okta-workforce-idp-in-auth0-for-spa/131913), where a user states that “the Okta Workforce Connector only works for Web Applications and not SPAs”. So I just need some confirmations: …

Hope this helps!
