OpenID integration with Okta

David,

Thanks for the follow-up.  After working through a few support cases with Acumatica we have everything working for the client.  The client is tied to Okta since they use it for all of their other internal applications so we had to figure it out.

One item I’ll add if someone finds this in the future is the client had the previous Okta integration that was linked via the External Identities of the user record.  For the new OpenID integration each user would have needed to login using their OpenID login and then login using the Acumatica login and password to relink the accounts.  Unfortunately no one knows their Acumatica logins so after some digging I was able to build the following SQL script into a customization package we’ll run after the upgrade to populate the new OidcProviderUsers table with the proper information.  The data in the OidcProviderUsers table is specific to the claim type setup with OpenID so it could be slightly different in other implementations.

INSERT INTO OidcProviderUsers (CompanyID,UserID,ProviderID,UserIdentityClaimType,UserIdentityClaimValue)
SELECT UI.CompanyID, UI.UserID, P.ProviderID,'email' AS 'UserIdentityClaimType', UI.UserKey AS 'UserIdentityClaimValue'
FROM UserIdentity UI
	LEFT JOIN OidcProvider P ON P.CompanyID=UI.CompanyID
	LEFT JOIN OidcProviderUsers PU ON PU.CompanyID=P.CompanyID
		AND PU.ProviderID=P.ProviderID
		AND PU.UserID=UI.UserID
WHERE UI.CompanyID > 1 AND UI.ProviderName='Okta' AND UI.Active=1
	AND P.Active=1 AND PU.UserIdentityClaimValue IS NULL