How to Set Up an Okta Passport for Authenticated Dashboards
This article explains how to create an Okta passport in Comeen Play, so your displays can sign in automatically and broadcast dashboards protected by Okta.
Prerequisites
Access to your Comeen Play account (login.new.play.comeen.com) with permission to manage integrations.
Your Okta tenant URL (for example,
https://acme.okta.com/). Once signed in, it must redirect to your Okta dashboard.(Optional) If the account uses a second factor: the OTP secret from the authenticator app matching your sign-in method (see step 2).
Important: Each sign-in method supports one authenticator app only: Google Authenticator for Okta native and Google, Microsoft Authenticator for Microsoft. Okta Verify (push, number challenge or built-in code), SMS, phone calls and security keys cannot be used.
Steps
1. Identify your sign-in method
Open one of your dashboards in a private browser window and watch what happens after you enter your email on the Okta page:
Okta native: you enter your password directly on the Okta page.
Google: Okta redirects you to a Google sign-in page.
Microsoft: Okta redirects you to a Microsoft sign-in page.
A passport covers one sign-in method. If some dashboards go through Google and others through Microsoft, create one passport for each.
2. Get your OTP secret (optional)
Skip this step if the account does not use a second factor.
On the dedicated account, add the authenticator app matching your sign-in method:
Okta native: Google Authenticator, added in Okta. If it is not available, ask your Okta administrator to enable it.
Google: Google Authenticator, added in the Google account.
Microsoft: Microsoft Authenticator, added in the Microsoft account.
When the QR code appears, display the secret key (in Okta, select Can't scan?).
Copy the secret key and keep it for step 3.
Finish the setup by scanning the QR code with the authenticator app matching your sign-in method.
3. Create the Okta passport
In Comeen Play, go to Integrations > Passports.
Select Add a passport, then choose Okta.
Enter a Passport title.
Enter your Okta tenant URL, for example
https://acme.okta.com/.Select the Sign-in method identified in step 1: Okta native, Google or Microsoft.
(Optional) If your tenant has a custom landing page, select Advanced settings > Show, then Add a prefix under Post-login URL prefixes.
Enter the Username and password of the dedicated account.
(Optional) Enter the OTP secret. Leave it empty if Okta does not ask for a second factor.
(Optional) Under Authorizations, select Add to choose who can access this passport.
Select Save Passport.
For the Google and Microsoft methods, enter the Google or Microsoft credentials and OTP secret, as described in our Google and Microsoft passport articles.
4. Set the dashboard entry portal (Okta sign-in method only)
Some dashboards send users to Google or Microsoft before reaching Okta. In that case, tell Comeen where the dashboard redirects first.
Open the dashboard content that uses your Okta passport.
In Entry portal, select one of the following:
No redirection: the dashboard goes straight to Okta.
Google: the dashboard shows a Google sign-in page first (for example, Looker Studio).
Microsoft: the dashboard shows a Microsoft sign-in page first.
Select Save.
5. Broadcast your dashboard
Create or open your authenticated dashboard content.
Select your Okta passport.
Add the content to a playlist and assign it to your displays.
Check that the dashboard displays correctly on screen.