Configure Browser Access with Okta

This document explains how to configure Okta as your IdP to work with Browser Access to perform authentication in a browser.

Log in to your Netskope tenant and go to Settings > Security Cloud Platform > Reverse Proxy > SAML and click Add Account.
Enter an IdP name and select Private Apps from the Applications dropdown. Enter a dummy value for SSO URL and SSO certificate and click Save.
Click Netskope Settings for the new account you just created.
Copy the values of ACS URL and Audience URL, and download the SAML Certificate.
Log in to your Okta Admin account and go to Applications, and then click Create App Integration.
Select SAML 2.0 and click Next.
Enter a name for the Application and click Next.
Enter your Private Apps Browser Access ACS URL and Audience URL from the Netskope tenant.
Click Show Advanced Settings here and upload the certificate downloaded from Netskope using Browse files as shown. When done, click Next, select this is an internal app, and then click Save.
Go to Assignments and assign this application to the users that you would like to allow access via Browser Access.
Go back to Applications and copy the Sign on URL, and download the Certificate.
In your Netskope tenant, go the SAML reverse proxy account created previously, and then update the IdP SSO URL and certificate retrieved from Okta. When finished, click Save.