Enterprise SSO
Okta Workforce Identity
Lithium

Implement SSO with Okta Workforce Identity using Lithium

See how to connect Okta Workforce Identity to your Lithium app and deliver seamless enterprise logins.
Book a Demo
Single sign-on Docs
Okta Workforce Identity Logo

How it Works

LoginRadius is a customer identity platform that makes it easy to add Single Sign-On (SSO) to your applications. It supports standard protocols like SAML and OIDC, allowing users to sign in once and access multiple apps securely.

Integrating LoginRadius with your Lithium application helps you:
  • Set up enterprise SSO with minimal configuration.
  • Manage authentication centrally for all your SaaS environments.
  • Improve security without adding complexity to your code.
How it Works

Quick Start Guide

Quick Start Guide
Integrating LoginRadius with Okta Workforce Identity allows your Lithium application to authenticate users through enterprise identity providers using SAML 2.0 or OIDC.

Once connected, users can log in with their corporate credentials, while LoginRadius manages tokens, sessions, and policy enforcement behind the scenes.
1

Install PHP SDK

$composer require loginradius/php-sdk
2

Set Up Identity Provider

Create an application in Okta Workforce Identity and configure the SAML or OIDC settings. Add the LoginRadius ACS URL, Entity ID, and redirect URIs, then download the IdP metadata.

3

Add Identity Provider to LoginRadius

Go to Authentication → Identity Providers → Custom Identity Providers in the LoginRadius Admin Console. Create a new SAML/OIDC connection and upload the metadata or discovery details from Okta Workforce Identity.

4

Integrate LoginRadius with Go

Use the LoginRadius SDK or REST API for Go to handle authentication redirects, callbacks, and token validation. Map user claims such as email, name, and groups from Okta Workforce Identity to LoginRadius and your app.

5

Test and Deploy

Test the entire authentication flow locally. Once verified, deploy your Lithium application and confirm that users can log in through Okta Workforce Identity seamlessly.

Supported Protocols

SAML

Utilize built-in SAML configurations to customize LoginRadius as an Identity Provider (IdP) for your applications, as well as integrate with external IDPs.
feature

OAuth

With LoginRadius built-in support for OAuth, enable user authentication and secure authorization for your or third-party applications.
feature

OIDC & JWT

Leverage OpenID Connect with LoginRadius to streamline user authentication. Enable your applications to verify user identities and securely access user profile data.
feature

Key Highlights Section 

Integrates quickly with Lithium using LoginRadius SDKs and REST APIs.
HTTP 200

SDKs and Libraries

Seamlessly integrate federation into your apps with open-source SDKs and libraries for Android, iOS, and popular web technologies and frameworks.

API Reference

Developer-friendly RESTful APIs and documentation that help you get going with any implementation.
Node.jsRubyPythonGoPHPJava.NETcURL
1
2
3
4
5
6
7
8
9
10
11
12
13
componentImage
Automated Token & Session Management

Simplifies token handling, session management, and user claim mapping.

componentImage
Advanced Multi-Factor Authentication

Includes built-in options for MFA, passkeys, and adaptive authentication.

componentImage
Seamless SCIM provisioning

Offers SCIM provisioning to automatically sync users and groups.

componentImage
Centralized Governance and Policies

Provides centralized configuration and policy control through the LoginRadius Admin Console.

componentImage
Enterprise-Grade Performance

Built for B2B SaaS scale; offers tenant isolation, audit logs, and 99.99% uptime SLAs.

Troubleshooting & Quick Fixes

1

Login Loop After Redirect

Check callback URLs and cookie domain settings.
2

401 Unauthorized or Invalid Token

Verify client ID, issuer, and audience.
3

User Assigned but Can’t Log In

Ensure proper user assignment and attribute mapping.
4

Missing or Incorrect User Attributes

Verify attribute mappings in both Okta Workforce Identity and LoginRadius.
5

SAML Certificate or Signature Error

Update or re-upload certificates and reimport metadata after rotation.
6

MFA or Passkey Not Triggering

Ensure MFA is enabled and configured correctly.

Interactive Resources

Go SDK API Reference

Go SDK API Reference

Full list of functions for Roles, MFA, and Account Management.
Sample App on GitHub

Sample App on GitHub

A production-ready Go server boilerplate.
SAML/OIDC Protocol Docs

SAML/OIDC Protocol Docs

Deep dive into how we handle federated handshakes.
Integrations and Connectors

Integrations and Connectors

Detailed list of pre-built connections and integrations.
City of Surrey

FAQs

Customer Identity, Simplified.

No Complexity. No Limits.
Thousands of businesses trust LoginRadius for reliable customer identity. Easy to integrate, effortless to scale.

See how simple identity management can be. Start today!
Free Trial
Contact Sales