Sign in to the Medical Web Viewer demo Using Okta

Okta is one of the most popular identity providers of single sign on (SSO) that you can enable for the Medical Web Viewer demo. Potentially, your organization may choose to authenticate using this service in other applications. To enable Okta in the Medical Web Viewer demo, proceed as follows:

1. Create an Okta account. If your organization is already set up, skip to step 2.

   https://www.okta.com/

2. On Okta — Admin's page, add a Web application with the following options:

   1. Name / label: MedicalViewer20

   2. Authorization Code

   3. Implicit

      1. Allow ID Token with implicit grant type

      2. Allow Access Token with implicit grant type

   4. Login redirect URIs: "http://localhost/MedicalViewerIdPLink/authorization-code/callback"

   5. Logout redirect URIs: "http://localhost/MedicalViewerIdPLink/Account/PostLogout"

   6. Login initiated by: either Okta or App

   7. Login flow: Redirect to app to initiate login (OIDC Compliant)

Copy the client credentials and use in the following step:

1. Create/Add users to the application you created. You can use the email address as the user name.

2. Configure the MedicalViewerIdPLink web service

   1. The service is installed at: Examples\DotNet\PACSFramework\MedicalWebViewer\Leadtools.Medical.WebViewer.IdP\IdP

   2. Modify the web.config as follows:

      1. Set the okta:ClientId value to the client id you obtained when setting up the application on Okta

      2. Set the okta:ClientSecret value to the client secret you obtained from setting up the application on Okta

      3. Set the okta:OrgUri value to the Uri of the oauth2 service on Okta: https://**account**.okta.com/oauth2/default

      Make sure this is not the admin account.

3. On the Medical Web Viewer demo, log in as Admin. Proceed to the Permission Management option and add the user you added to the application on Okta. You need to add the same user (e.g., the email address), type the user name, and select the Federated IdP Authentication check box. After that go to the Update User section and assign permissions to the newly added user as needed.

4. On the Medical Web Viewer demo, log in as Admin. Proceed to the Config Admin Options section, scroll to the bottom, and enable the Sign in using Okta option.

5. To test it, log out and try logging in using Okta. A button with that option should be available in the login screen.

6. The button will take you to the Okta sign-in page and will redirect you once the sign in is successful.