Okta Active Directory integration with Adobe Learning Manager

Last updated on Dec 27, 2022

In this document, you will learn how to integrate Adobe Learning Manager with Okta Active Directory (AD). When you integrate Adobe Learning Manager with Okta AD, you can:

Check and control Learning Manager user's access in Okta AD.
Enable users to be automatically signed in to Adobe Learning Manager with their Okta AD accounts.
Manage your accounts in one central location - the Okta portal.

Adobe Learning Manager supports Identity Provider (IdP) and Service Provider (SP) initiated SSO.

Create an application in OKTA

Log in as an Administrator on Okta AD.
Click Applications. This opens the Application Store in Okta.

View Application store
Click Create App Integration.

View Applications page
Select SAML 2.0. from the new app integration window.

Sign-in method
Choose Create SAML integration > General settings page. Enter an Application Name.

Note that this can be any name to uniquely identify your application. Once done, click Next.

Enter application name
Perform the following steps on the Configure SAML settings page:
For IDP setup:
1. In the Single Sign-on URL field, type the URL: https://captivateprime.adobe.com/saml/SSO
2. In the Audience URL field, type the URL: https://captivateprime.adobe.com
3. In the Name ID Format drop-down box, select Email Address.
4. In the Application username drop-down, select Okta username.
5. In case you want to pass any additional attributes, you can add the attributes under the Attributes Statement (Optional)
View SAML settings for IdP
For SP setup:
1. In the Single Sign-on URL field, type the URL: https://captivateprime.adobe.com/saml/SSO
2. In the Audience URL field, type the URL: https://captivateprime.adobe.com
3. In the Name ID Format drop-down box, select Email Address.
4. In the Application, username drop-down select Okta username.
5. Click on Show Advanced Settings.
6. Under Signature Algorithm, select RSA-SHA256
7. In the Assertion Algorithm, select SHA256
8. In the Assertion Encryption dropbox, select Encrypted.
9. In the Encryption Certificate option, upload the Certificate file shared by Adobe.
10. In case you want to pass any additional attributes, you can add the attributes under the Attributes Statement (Optional).
View SAML settings for SP

Once done, click Next.
The Feedback tab is optional. Once you have selected the options and given your feedback, click Finish.

Feedback tab (optional)

Extract IDP initiated URL and Metadata file

To view the IdP/SP initiated URL and Metadata file, perform the below steps:

Open the application that you have created.
Under the Single Sign-On tab, click View Instructions.

View Sign-on tab
For IDP:
1. The Identity Provider Single Sign-On URL is the IdP initiated URL.
2. Copy all the text that is present under the Optional field.
3. Open a new notepad document and paste the copied text.
4. Click File > Save as > “filename.xml”. This will be the metadata file.
For SP:
1. The Identity Provider Single Sign-On URL is the IdP initiated URL.
2. The Identity Provider Issuer is the Entity ID.
3. Copy all the text that is present under the Optional field.
4. Open a new notepad document and paste the copied text.
5. Click File > Save as > “filename.xml”. This will be the metadata file.
View configuration for Learning Manager SSO

Note:

You need to save this file in an XML format.

Configuring Adobe Learning Manager SSO

To configure Adobe Learning Manager SSO, perform the steps mentioned in the below article.

https://helpx.adobe.com/in/captivate-prime/kb/sso-authentication-for-captivate-prime.html

Get help faster and easier

New user?