---
title: "Adding a Chiclet for IdP-initiated SSO (OKTA)"
canonical: "https://docs.infoblox.com/space/BloxOneCloud/35431099/Adding%20a%20Chiclet%20for%20IdP-initiated%20SSO%20(OKTA)"
format: markdown
---
<span style="color: #000000">You can add a chiclet to your users' Okta IdP dashboard, so they can get authenticated and access a specific web page without entering login credentials. To add the chiclet to the dashboard, you first set the default relay state URL in the Okta SAML application, create a bookmark application, and then assign the bookmark application to applicable users and groups. These users can then use the bookmark chiclet on their IdP dashboard to get authenticated automatically while accessing the web page.</span>

<span style="color: #000000">To configure the IdP-initiated SSO chiclet, complete the following:</span>

1. <span style="color: #000000">Log in to your Okta IdP instance as an admin.</span>
2. <span style="color: #000000">Click</span>**<span style="color: #000000"> Admin</span>**<span style="color: #000000"> to access the Admin Console, and then click </span>**<span style="color: #000000">Applications</span>**<span style="color: #000000">.</span>
3. <span style="color: #000000">Go to your SAML application -> </span>**<span style="color: #000000">General</span>**<span style="color: #000000"> tab, select </span>**<span style="color: #000000">Edit</span>**<span style="color: #000000"> for </span>**<span style="color: #000000">App Settings</span>**<span style="color: #000000">, and complete the following:</span>
  1. **<span style="color: #000000">Application visibility</span>**<span style="color: #000000">: Select the </span>**<span style="color: #000000">Do not display app icon to users</span>**<span style="color: #000000"> and </span>**<span style="color: #000000">Do not display app icon in the Okta Mobile App </span>**<span style="color: #000000">check boxes to ensure that the SAML application chiclet is not displayed for users who do not have the privileges to manage applications on your IdP.</span>
  2. <span style="color: #000000">Click </span>**<span style="color: #000000">save</span>**<span style="color: #000000">.</span>
4. <span style="color: #000000">Go to your SAML application -> </span>**<span style="color: #000000">General</span>**<span style="color: #000000"> tab, select </span>**<span style="color: #000000">Edit</span>**<span style="color: #000000"> for </span>**<span style="color: #000000">SAML Settings</span>**<span style="color: #000000">, and complete the following:</span>
  1. **<span style="color: #000000">Default Relay State</span>**<span style="color: #000000">: Enter the URL of the desired landing page to which you want to redirect your users after a successful SSO authentication.</span>
  2. <span style="color: #000000">Click </span>**<span style="color: #000000">save</span>**<span style="color: #000000">.</span>
5. <span style="color: #000000">Go to your SAML application -> </span>**<span style="color: #000000">General</span>**<span style="color: #000000"> tab, scroll to the bottom to locate the </span>**<span style="color: #000000">App Embed Link</span>**<span style="color: #000000"> section, and complete the following:</span>
  1. **<span style="color: #000000">EMBED LINK</span>**<span style="color: #000000">: Copy the link in the textbox and paste it into your notepad. You will need this later.</span>
6. <span style="color: #000000">Go to the </span>**<span style="color: #000000">Applications</span>**<span style="color: #000000"> section of your Okta instance, click </span>**<span style="color: #000000">New Application</span>**<span style="color: #000000">, and complete the following to create a bookmark application:</span>
  1. <span style="color: #000000">In the </span>**<span style="color: #000000">Search</span>**<span style="color: #000000"> bar: Enter</span>**<span style="color: #000000"> Bookmark App</span>**<span style="color: #000000">.</span>
  2. <span style="color: #000000">Select </span>**<span style="color: #000000">Bookmark App</span>**<span style="color: #000000"> from the list of results.</span>
  3. <span style="color: #000000">Click </span>**<span style="color: #000000">Add</span>**<span style="color: #000000">.</span>
7. <span style="color: #000000">On the </span>*<span style="color: #000000">App Settings</span>*<span style="color: #000000"> page, complete the following:</span>
  1. **<span style="color: #000000">Application label</span>**<span style="color: #000000">: Enter the name of your bookmark application. Use a name that reflects the web page for your bookmark application.</span>
  2. **<span style="color: #000000">URL</span>**<span style="color: #000000">: Paste the URL you copied from the </span>**<span style="color: #000000">App Embed Link</span>**<span style="color: #000000"> section into the textbox.</span>
  3. <span style="color: #000000">Click </span>**<span style="color: #000000">Save</span>**<span style="color: #000000">.</span>
8. <span style="color: #000000">On the </span>*<span style="color: #000000">App Settings</span>*<span style="color: #000000"> page, click the </span>**<span style="color: #000000">Assignments</span>**<span style="color: #000000"> tab, and complete the following to assign the bookmark application to all required users & groups:</span>
  1. <span style="color: #000000">Check users to ensure that they are assigned to the new application</span>
  2. <span style="color: #000000">Check groups to ensure that they are assigned to the new application.</span>
9. <span style="color: #000000">Log out of Okta.</span>
10. <span style="color: #000000">To test the chiclet, log in as one of the users to whom you have assigned the new bookmark application.</span>
11. <span style="color: #000000">You should see the bookmark chiclet on the dashboard. The following is an example:</span>  
> Macro (inline-media-image)
12. <span style="color: #000000">Click the chiclet. It should direct you to the desired web page (via the URL you entered for the </span>**<span style="color: #000000">Relay State URL</span>**<span style="color: #000000">), and you will be authenticated automatically.</span>