{"id":76872,"date":"2023-06-05T13:10:54","date_gmt":"2023-06-05T17:10:54","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=76872"},"modified":"2023-06-05T13:10:54","modified_gmt":"2023-06-05T17:10:54","slug":"configure-okta-to-use-cloud-ldap","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap","title":{"rendered":"Configure Okta to Use Cloud LDAP"},"content":{"rendered":"\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>The configuration settings were tested on the latest version as of 06\/09\/2021.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>Prerequisites<\/strong>:\u00a0<\/p>\n\n\n\n<ul>\n<li>See\u00a0Use Cloud LDAP\u00a0to obtain the JumpCloud specific settings required below.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Okta LDAP Agent Configuration<\/h2>\n\n\n\n<p>When using the\u00a0<a href=\"https:\/\/help.okta.com\/en\/prod\/Content\/Topics\/Directory\/ldap-agent-install-configure.htm\" target=\"_blank\" rel=\"noreferrer noopener\">Okta\u00a0LDAP Agent,<\/a>\u00a0here are the basic settings to configure authentication with JumpCloud&#8217;s hosted LDAP service:<\/p>\n\n\n\n<ul>\n<li><strong>LDAP Server:<\/strong>\u00a0ldap.jumpcloud.com<\/li>\n\n\n\n<li><strong>Root DN<\/strong>:\u00a0ou=Users,o=YOUR_ORG_ID,dc=jumpcloud,dc=com<\/li>\n\n\n\n<li><strong>Bind DN<\/strong>:\u00a0uid=LDAP_BIND_USER,ou=Users,o=YOUR_ORG_ID,dc=jumpcloud,dc=com<\/li>\n\n\n\n<li><strong>Bind Password:<\/strong>\u00a0LDAP_BIND_USER_PASSWORD<\/li>\n\n\n\n<li><strong>Use SSL connection:<\/strong>\u00a0Enable for SSL\u00a0<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">LDAP Configuration Settings in Okta<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Version<\/h3>\n\n\n\n<ul>\n<li>LDAP Version:\u00a0OpenLDAP<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Objects<\/h3>\n\n\n\n<ul>\n<li>Unique Identifier Attribute:\u00a0entrydn<\/li>\n\n\n\n<li>DN Attribute:\u00a0entrydn<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Users<\/h3>\n\n\n\n<ul>\n<li>User Search Base:\u00a0ou=Users,o=YOUR_ORG_ID,dc=jumpcloud,dc=com<\/li>\n\n\n\n<li>User Object Class:\u00a0inetorgperson<\/li>\n\n\n\n<li>User Object Filter:\u00a0(objectclass=inetorgperson)<\/li>\n\n\n\n<li>Account Disabled Attribute:\u00a0pwdlock<\/li>\n\n\n\n<li>Account Disabled Value:\u00a0true<\/li>\n\n\n\n<li>Password Attribute:\u00a0userpassword<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Group<\/h3>\n\n\n\n<ul>\n<li>Group Search Base:\u00a0ou=Users,o=YOUR_ORG_ID,dc=jumpcloud,dc=com<\/li>\n\n\n\n<li>Group Object Class:\u00a0groupofnames<\/li>\n\n\n\n<li>Group Object Filter:\u00a0(objectclass=groupofnames)<\/li>\n\n\n\n<li>Member Attribute:\u00a0member<\/li>\n\n\n\n<li>User Attribute:\u00a0memberof<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Role<\/h3>\n\n\n\n<ul>\n<li>Object Class:\u00a0groupofnames<\/li>\n\n\n\n<li>Membership Attribute:\u00a0memberof<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Validating Configurations<\/h2>\n\n\n\n<ul>\n<li><strong>Okta username format: <\/strong>email<\/li>\n\n\n\n<li><strong>Example username: <\/strong><a href=\"mailto:user@company.com\">user@company.com<\/a><\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Use any email address associated to a user&#8217;s JumpCloud account. The User in JumpCloud must also be bound either directly to or a member of a User Group which has been bound to LDAP. This will test to see if Okta can query an existing JumpCloud user through the Okta LDAP Agent to JumpCloud.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Example of\u00a0 a Successfully Validated\u00a0Configuration<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"889\" height=\"814\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/okta-validate-configuration.png\" alt=\"\" class=\"wp-image-86558\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/okta-validate-configuration.png 889w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/okta-validate-configuration-300x275.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/okta-validate-configuration-768x703.png 768w\" sizes=\"(max-width: 889px) 100vw, 889px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Importing Users into Okta from JumpCloud via LDAP<\/h2>\n\n\n\n<p>Once you&#8217;ve configured Okta LDAP&#8217;s Directory Integration and LDAP Agents, the next step is to import Users from JumpCloud.&nbsp;<\/p>\n\n\n\n<p><strong>To import users into Okta from JumpCloud:\u00a0<\/strong><\/p>\n\n\n\n<ol>\n<li>Navigate to Directory Integrations and select the newly configured LDAP Directory Integration you&#8217;ve just configured in the steps above.&nbsp;<\/li>\n\n\n\n<li>Select the <strong>Import<\/strong> tab.\u00a0<\/li>\n\n\n\n<li>Click <strong>Import Now<\/strong>.<\/li>\n\n\n\n<li>A pop up modal will appear, allowing you to select <strong>Incremental<\/strong><em> <\/em>or <strong>Full<\/strong><em>. <\/em>This will be based on how you would like to import users. To start or test the import, select <strong>Incremental<\/strong>.\u00a0<\/li>\n\n\n\n<li>Click <strong>Import<\/strong>.<\/li>\n\n\n\n<li>You&#8217;ll see the number of Users and Groups that have been scanned from your JumpCloud organization that have been bound to JumpCloud LDAP.<\/li>\n\n\n\n<li>You can then select the users you&#8217;d like to import into Okta from JumpCloud from this list.&nbsp;<\/li>\n\n\n\n<li>When you&#8217;re ready to import these selected users, select <strong>Confirm Assignments<\/strong>.<\/li>\n<\/ol>\n\n\n\n<p>Once you&#8217;ve imported your users from JumpCloud into Okta via LDAP, you should see these Users within the <strong>People<\/strong> tab within the Okta LDAP Directory Integration within Okta&#8217;s admin portal.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Troubleshooting<\/h2>\n\n\n\n<p>If the error\u00a0<code>Could not find a value for the BaseSubstitutionProperty on the User result<\/code>\u00a0is received, perform the following steps to resolve:<\/p>\n\n\n\n<ol>\n<li>During initial configuration, remove the&nbsp;<code>memberOf<\/code>&nbsp;value for the&nbsp;<strong>Groups<\/strong>&nbsp;&gt;&nbsp;<strong>User Attribute<\/strong>&nbsp;configuration and leave the field blank.<\/li>\n\n\n\n<li>After the configuration is successfully saved, this value may then be re-input as per the configuration listed below.<\/li>\n\n\n\n<li>If the verification test continues to fail after replacing the&nbsp;memberOf&nbsp;attribute within the configuration, then confirm that your LDAP Users have been associated with an LDAP-enabled group as the query performed by Okta requires the attribute to be present in the user object during the verification.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Prerequisites:\u00a0 Okta LDAP Agent Configuration When using the\u00a0Okta\u00a0LDAP Agent,\u00a0here are the basic settings to configure authentication with JumpCloud&#8217;s hosted LDAP [&hellip;]<\/p>\n","protected":false},"author":204,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2845,2896],"support_tag":[],"coauthors":[2838],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Configure Okta to Use Cloud LDAP - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to configure Okta to use LDAP.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configure Okta to Use Cloud LDAP\" \/>\n<meta property=\"og:description\" content=\"Learn how to configure Okta to use LDAP.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/okta-validate-configuration.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"jenniferklein\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap\",\"url\":\"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap\",\"name\":\"Configure Okta to Use Cloud LDAP - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/okta-validate-configuration.png\",\"datePublished\":\"2023-06-05T17:10:54+00:00\",\"dateModified\":\"2023-06-05T17:10:54+00:00\",\"description\":\"Learn how to configure Okta to use LDAP.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/okta-validate-configuration.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/okta-validate-configuration.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Configure Okta to Use Cloud LDAP\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Configure Okta to Use Cloud LDAP - JumpCloud","description":"Learn how to configure Okta to use LDAP.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap","og_locale":"en_US","og_type":"article","og_title":"Configure Okta to Use Cloud LDAP","og_description":"Learn how to configure Okta to use LDAP.","og_url":"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap","og_site_name":"JumpCloud","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/okta-validate-configuration.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"jenniferklein"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap","url":"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap","name":"Configure Okta to Use Cloud LDAP - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/okta-validate-configuration.png","datePublished":"2023-06-05T17:10:54+00:00","dateModified":"2023-06-05T17:10:54+00:00","description":"Learn how to configure Okta to use LDAP.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap#primaryimage","url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/okta-validate-configuration.png","contentUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/okta-validate-configuration.png"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/configure-okta-to-use-cloud-ldap#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Configure Okta to Use Cloud LDAP"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76872"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/204"}],"version-history":[{"count":4,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76872\/revisions"}],"predecessor-version":[{"id":86562,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76872\/revisions\/86562"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=76872"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=76872"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=76872"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=76872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}