Figure6Groupmapping
Okta
YoucanintegrateOktawithAvigilonAltaControlCentertoimportandsyncusersandaccessgroupsintheUS
orEUregion.
Note:Beforeyoustart,contactyourintegratortoinstallandconfiguretheOktaandAvigilonAltaControl
CenterSAMLintegrationfortherequiredregion.Formoreinformation,seetheAvigilonAltaarticle
1
about
usingtheOktaAdministratorDashboard.GotoSignon>Edit>AdvancedSign-onSettings,andenterin
RegionBaseURL:
l
https://api.openpath.comforUSusers
l
https://api.eu.openpath.comforEUusers
TousetheAPItoken(APIkey)authenticationmethod,youneedadminprivilegesinyourOktaaccount.We
recommendusingadedicatedserviceaccount
2
thatusesonlytheOktagroupmembershipadminroleto
synchronizeyourusersandaccessgroups.YoualsoneedtogenerateanOktaAPIkey(token
3
)fortheOkta
serviceaccount.
TousetheOAuth2.0method,youneedtheOktasuperadministrator(admin)roletoaddtheAPIService
Integration.
4
1. Gotocontrol.openpath.com/loginandsignin.ToaccesstheEuropeanControlCenter,goto
control.eu.openpath.com/login.
1
Formoreinformation,seeAvigilonAltaarticle:
https://help.openpath.com/space/EHC/2006908929/How+to+Configure+SAML+2.0+for+Okta+and+Avigilon+Alta+Security.htm
2
Formoreinformation,seeOktadocumentation:https://developer.okta.com/docs/guides/create-an-api-token/overview/#token-best-practice-service-
account
3
Formoreinformation,seeOktadocumentation:https://developer.okta.com/docs/guides/create-an-api-token/main
4
Formoreinformation,seeOktadocumentation:https://help.okta.com/en-us/Content/Topics/apiservice/add-api-service-integration.htm
App marketplace 110