Configure OAuth with Okta

Navigate to your Okta space, go to the Applications tab, and create a new application using the Create New App button.

Select OpenID Connect as the Authentication Method.

Give the application a name, and type in the URL you use to reach Thinfinity VirtualUI. Then select Save.

You should be redirected to the Application Settings. In here, select General, and edit the “Login information”. Configure the Initiate login URI field, by adding the Thinfinity VirtualUI website address and “/Okta” at the end of the URL.

Copy and paste both Client ID and Client Secret for future references.

Select the Assignments tab and add your users to the Application.

Open either the Thinfinity Remote Desktop Server Manager or the Thinfinity VirtualUI Manager and navigate to the Authentication tab. Select OAuth 2.0 and choose Other.

Enter your Client ID and Client Secret.

Select the Server tab and add the following parameters:

• Authorization URL: https://[MyOktaSpace].okta.com/oauth2/v1/authorize
• Parameters: scope=openid+profile&state=okta
• Token Validation Server URL: https://[MyOktaSpace].okta.com/oauth2/v1/token
• Profile Information Server URL: https://[MyOktaSpace].okta.com/oauth2/v1/userinfo
• Login username value in returned Json: preferred_username

You’ll also need to change the name of the Authentication Method to “Okta” (or to the URL you configure in the Initiate Login URI). Select OK after you finish configuring the Authentication Method.

Select the Mappings tab and then select Add under the Authentication ID Mask. Add the email address of the Okta user you want to validate and select OK. Then, under the Associated Permissions field, select Add and search for the Active Directory User. After you add the appropriate mappings, select Apply.

Navigate to the Thinfinity VirtualUI landing page. You should see the “Login With Okta” option listed as an Authentication Method.