Using Okta Express Configuration

Add the SonarQube Cloud integration in Okta

1. In the Okta Admin Console, go to Applications > Applications.

2. Select Browse App Catalog.

3. Search for SonarQube and select SonarQube Cloud.

4. Select Add Integration.

5. On the General Settings page, enter a label for the integration, for example, SonarQube Cloud.

6. Select Done.

Configure SSO and Universal Logout

1. In Okta, go to the Sign On tab of your SonarQube Cloud integration and select Express Configure SSO & UL.

You are prompted for your Sonar Express Configuration ID.

1. Enter your Sonar Express Configuration ID, in the following format org-<enterprise-uuid> . You can retrieve the ID from SonarQube Cloud:

   1. In SonarQube Cloud, retrieve your enterprise.

   2. Go to Administration > SSO & Provisioning. The SSO & Provisioning page opens.

   3. Expand the Single sign-on section and select Okta Express Configuration.

   4. Copy the Sonar Express Configuration ID and paste it into the Sonar Express Configuration ID window. Select Continue.

1. SonarQube Cloud authentication page opens with options to login. Make sure you login using the DevOps platform that is linked to your SonarQube Cloud enterprise admin account.

2. Authorize the app as a SonarQube Cloud enterprise administrator. This creates a SSO connection in your SonarQube Cloud enterprise.

1. Review the permissions requested and select Accept to authorize the connection. Once authorization is complete, you are redirected back to Okta. The SSO and Universal Logout configuration is applied automatically. See the Universal Logout section for more information.

Add the groups attribute mapping

1. In Okta, go to the Sign On tab of your SonarQube Cloud integration.

2. In Settings > Sign on methods, select the link Configure profile mapping.

1. Close the dialog to open the Profile Editor page.

2. Select the Add Attribute button. The Add Attribute dialog opens.

3. In the dialog, set the following parameters:

   • Data type: Select string array

   • Display name: Enter Groups

   • Variable name: Enter userGroups

   • Enum: not selected

   • Attribute required: Select Yes

   • Attribute type: Select Group

   • Group Priority: Select Use Group Priority

4. Select Save. The group's attribute is added.

5. Select the Mappings button. The User Profile Mappings dialog opens.

6. Select the tab Okta User to <SonarQube Cloud integration>.

7. Enter the following expression:

user.getGroups({'group.profile.name': '.*'}).![name]

1. To preview the attribute for your application enter the Okta user name in the preview textbox. The preview shows groups that the user belongs to in Okta.

1. Click Exit Preview.

2. Select Save Mappings and then Apply updates.

Assign users and groups

1. In Okta, go to the Assignments tab of your SonarQube Cloud integration.

2. Select Assign > Assign to People or Assign to Groups.

3. Select the users or groups you want to give access to SonarQube Cloud and select Assign.

4. Select Done.

Verify the setup

Verify SSO

1. As the assigned test user, sign into the Okta dashboard.

2. Select the SonarQube Cloud app tile. The name of the app is what you have configured for its label in Add the SonarQube Cloud integration in Okta.

3. Verify that you are signed in to SonarQube Cloud without being prompted for additional credentials.

Verify SP-initiated SSO

1. Navigate to your SonarQube Cloud login page.

2. Select the SSO option.

3. Enter the enterprise key.

4. Verify that you are redirected to Okta for authentication and then signed into SonarQube Cloud.

Set up SCIM provisioning (optional)

You have to set up SCIM provisioning from the SonarQube Cloud assistant. See Set up SCIM for details.

Complete your setup

See Complete SSO setup for more information.