> ## Documentation Index
> Fetch the complete documentation index at: https://docs.truu.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# OpenID Connect Adapter Setup

> This is a step-by-step guide as to how one created an OpenID Connect Adapter to facilitate the integration between one's Okta Directory and TruU.

## Prerequisites

* **OpenID Connect IdP**\
  In Okta, under Identity Provider, ensure the OpenID Connect IdP integration is enabled
* **Customer directory**\
  TruU supports various directories: AD, Entra ID, Okta, or Google
* **Okta version check**\
  TruU recommends that the customer run the Okta Identity Engine (OIE) as a platform update from Okta’s classic engine
* **Designate two Admins (this can be the same individual):**
  * Okta Admin to perform the Okta configuration and integration with TruU and administer the TruU/Okta relationship
  * The Bootstrap admin for the TruU tenant. The Bootstrap admin will be the customer end policy administrator and your TruU tenant point of contact

### Configuring Okta OIDC Integration

#### Add OpenID Connect Adapter

1. Login to your **TruU Admin portal**
2. Navigate to the "Integrations" tab and ensure you are on the "Adapters" tab. Click on the **(+)** to "Add an Adapter"

<img src="https://mintcdn.com/truu-2/E8DyuEPIwcNXL1if/images/image-3!-3.png?fit=max&auto=format&n=E8DyuEPIwcNXL1if&q=85&s=0b6d83579e59fee294eacbd6dc282168" alt="Image 3! 3" width="876" height="261" data-path="images/image-3!-3.png" />

3. Select **Single Sign On** from the drop-down menu

<img src="https://mintcdn.com/truu-2/E8DyuEPIwcNXL1if/images/image-4!-2.png?fit=max&auto=format&n=E8DyuEPIwcNXL1if&q=85&s=61de4a6fcb95330ed2c1862d8b95264b" alt="Image 4! 2" width="875" height="386" data-path="images/image-4!-2.png" />

4. Under "Adapter Type", Select **OpenID Connect**

<img src="https://mintcdn.com/truu-2/E8DyuEPIwcNXL1if/images/image-5!-2.png?fit=max&auto=format&n=E8DyuEPIwcNXL1if&q=85&s=75b286eca42ac46c6a056e5b1ce61ac2" alt="Image 5! 2" width="875" height="390" data-path="images/image-5!-2.png" />

5. Select **Digital Admin** (Super Admin if not selected)

<img src="https://mintcdn.com/truu-2/E8DyuEPIwcNXL1if/images/image-6!-2.png?fit=max&auto=format&n=E8DyuEPIwcNXL1if&q=85&s=1a96f0dd23637cba65139994ff96f247" alt="Image 6! 2" width="884" height="373" data-path="images/image-6!-2.png" />

6. Click on **Download and Finish**

NOTE: Save the ensuing files that are downloaded, as you will need them later

7. Log into your "Okta Admin Portal"
8. Navigate to the **Security** tab, then select the **Identity Providers** tab. Click the **Add Identity Provider** button on this page

<img src="https://mintcdn.com/truu-2/E8DyuEPIwcNXL1if/images/image-7!-2.png?fit=max&auto=format&n=E8DyuEPIwcNXL1if&q=85&s=a3ef973f96a98ea3c543ca8431394962" alt="Image 7! 2" width="854" height="392" data-path="images/image-7!-2.png" />

9. Select **OpenID Connect** as the provider, then press **Next**

<Frame>
  <img src="https://mintcdn.com/truu-2/E8DyuEPIwcNXL1if/images/image-8!-2.png?fit=max&auto=format&n=E8DyuEPIwcNXL1if&q=85&s=8a4738ae56e20263162f408291f64fd0" alt="Image 8! 2" width="876" height="424" data-path="images/image-8!-2.png" />
</Frame>

10. Under **General Settings**
    1. Add **Name** (Include TruU in name to help identify)
    2. Select **SSO only** under IdP Usage
    3. Select **Trust AMR Claims from this Identity Provider**

<Frame>
  <img src="https://mintcdn.com/truu-2/E8DyuEPIwcNXL1if/images/image-9!-2.png?fit=max&auto=format&n=E8DyuEPIwcNXL1if&q=85&s=094f14d4bc8a7e7124829091c0eca229" alt="Image 9! 2" width="808" height="395" data-path="images/image-9!-2.png" />
</Frame>

11. Under **Client Details**
    1. Open the file downloaded from "Creating a TruU OpenID Connect Adapter"
    2. Fill in the following fields: *Client ID, Client Secret, Issuer, Authorize Endpoint, JWKS Endpoint, and Token Endpoint*. Then, click **Finish**

<Frame>
  <img src="https://mintcdn.com/truu-2/E8DyuEPIwcNXL1if/images/image-10!-2.png?fit=max&auto=format&n=E8DyuEPIwcNXL1if&q=85&s=31a21c46bfd5a2b9ce01cbb674784a25" alt="Image 10! 2" width="757" height="197" data-path="images/image-10!-2.png" />
</Frame>

<Frame>
  <img src="https://mintcdn.com/truu-2/E8DyuEPIwcNXL1if/images/image-11!-1.png?fit=max&auto=format&n=E8DyuEPIwcNXL1if&q=85&s=23acc797eadc79253fd509a394f85e6a" alt="Image 11! 1" width="878" height="559" data-path="images/image-11!-1.png" />
</Frame>

12. **Set a** Routing Rule **with TruU as the configured Identity Provider. This allows Okta to delegate authentication requests to TruU under pre-defined Okta conditions. To set this up, navigate to**Security > Identity Providers > Routing Rules **in the Okta Admin Portal and select**Add Routing Rule

<Frame>
  <img src="https://mintcdn.com/truu-2/E8DyuEPIwcNXL1if/images/image-12!-2.png?fit=max&auto=format&n=E8DyuEPIwcNXL1if&q=85&s=e556b6c10af8f27b36d1e450995d7e09" alt="Image 12! 2" width="876" height="391" data-path="images/image-12!-2.png" />
</Frame>
