Documentation Index

Fetch the complete documentation index at: https://support.appgate.com/llms.txt

Use this file to discover all available pages before exploring further.

Integrate Okta with ZTP using OIDC

  • Published on Jun 17, 2026
  • 1 minute read
Prev Next

Prerequisites

This integration requires the following:

  • Okta Identity Cloud account with admin credentials

  • An active ZTP account, accessible using the Bootstrap Identity provided by AppGate

  • A test user account on your Okta cloud directory with at least the following attributes configured:

    • email, for example: joe.smith@mycompany.com

    • firstName, for example: Joe

    • lastName, for example: Smith

Step 1: Add a new application in Okta

  1. Log in to your Okta admin account. Confirm that you are on the Admin UI, not the end-user dashboard.

  2. In the left menu, go to Applications and click Create App Integration.

  1. For Sign-in method, select OIDC – OpenID Connect. For Application type, select Web Application.

  1. On the New Web App Integration page, enter a name for the application, for example: AppGate ZTP.

  1. Leave all other fields at their default values and click Save.

Step 2: Record the client credentials

  1. In the General tab of the application settings, record the Client ID value.

  2. Click Edit.

  3. In the Sign-in redirect URI field, enter a placeholder URL, for example: https://example.com. You will replace this value after completing the ZTP configuration form.

  4. In the Sign-out redirect URI field, enter the same placeholder URL.

  1. Click Save.

  2. Record the Client ID and Client Secret values from the General tab before proceeding to configure the IdP in ZTP.

Step 3: Configure the IdP in ZTP

  1. In ZTP, go to Settings > Identity Providers in the left menu.

  2. Click Add New and select Open ID provider.

  3. Complete the form using the following values:

Field

Description

Name*

Okta - OIDC

Audience/Client ID*

Values generated by Okta in Step 2.

Client Secret*

Authentication URL*

https://[identity-provider-hostname]/oauth2/default/v1/authorize

Token URL*

https://[identity-provider-hostname]/oauth2/default/v1/token

User Info URL

https://[identity-provider-hostname]/oauth2/default/v1/userinfo

JWKS URL

https://[identity-provider-hostname]/oauth2/default/v1/keys

Email Attribute*

email

First Name

Attribute*

given_name

Last Name

Attribute*

family_name

Username Attribute*

username

  1. Copy the Redirect URI from the ZTP configuration form by clicking the copy to clipboard button.

  1. In Okta, set the Sign-in redirect URI field to the Redirect URI you copied from ZTP.

  2. Set the Sign-out redirect URI field to the same Redirect URI, appending /logout_response to the end of the URL.

  3. Click Save and test the integration.

Related articles