Sonarqube --> OKTA SAML Configuration

[Komal_Musai]

Trying to configure SAML with OKTA on Sonarqube Version 9.4.0.54424 but am unable to get the configuration working.

I followed this guide with no luck:

SonarQube and SAML Authentication with Okta

Hello! Some users request guidance for integrating SAML authentication when using Okta as an identity provider. I recently pulled together some detailed information internally based on my experience with a test organization in Okta, and I’m happy to share it with our awesome community! You may need to adjust based on your specific set of circumstances, but I hope this gets you started. 1. Create a new application in Okta [1OktaStart] 2. Configure General Settings for your Application [2…

Things I’ve noticed that could be possible issues:

Under Administration → Configuration → General Settings → Security → SAML → Provider Certificate, the Default is set to and takes the certificate as a password showing privacy dots/characters.
OKTA isn’t supported by Sonarqube as of yet (Configuration works fine with OneLogin but fails on OKTA)

Is there a way to change this default in order to see if the configuration is taking the full certificate? Or does anyone have any suggestions as to why this may be happening?

All help is appreciated. Thanks!

[Colin]

Hey there

@Komal_Musai

I followed this guide with no luck:

What actual error are you receiving when it doesn’t work?

[Komal_Musai]

“You’re not authorized to access this page. Please contact the administrator.”

[Colin]

I would suggest checking the logs/web.log file of your instance (after bumping up the log level in Administration > System > Log Level) and looking for a more specific error message.

[Komal_Musai]

Tried the SOP again and now getting the following:

You’re not authorized to access this page. Please contact the administrator.

Reason: This account is already associated with another authentication method. Sign in using the current authentication method, or contact your administrator to transfer your account to a different authentication method.

I will try to dig through the logs and get back to you.

[Colin]

Take a look here:

Sonarqube SAML Integration

Hey @ashokkumarsarma.r This is a community where users have the chance to ask for help, and many users have the chance to contribute. Please make sure to review our FAQ. You’ve also asked for a lot of different pieces of information, but (hopefully?) we’ve landed on just tsis question: Even if a user has only logged in as a local user before, if the same username attempts to login (via a different authentication provider), the user must be migrated over to the new authentication provider (in …

[Komal_Musai]

Would I have to migrate users even though I’m moving from SAML in OneLogin to SAML in OKTA?

[Komal_Musai]

Hello,

You can mark this issue as resolved. I was able to solve the issue by deleting the user’s account and having the accounts re-provisioned by signing back in using OKTA.

According to the team using SonarQube, the user’s accounts hold no data, but they can hold Tokens so it’s best to reach out to users who have tokens to make sure they are aware that the token will need to be recreated.

Also, a good idea to take a screenshot of users so you have a history of their roles.

Thanks!