B2B Integration

Effortlessly integrate with enterprise directories or identity providers.

On average, the total cost of ownership of building and maintaining a B2B SAML integration in-house is $20k per integration. Using Okta’s B2B integration services instead makes connecting simple and affordable.

Try Okta

Start building for free

Inbound federation

Easily connect with partners that have their own IDP or access management deployment; federate using SAML or OIDC.

Learn more

Directory integration

Connect your customer's LDAP or Active Directory; synchronise user accounts to Universal Directory.

Learn more

Easily connect with partners that have their own IDP or access management deployment; federate using SAML or OIDC.

Inbound SAML integration

Allow users to sign in with their existing credentials from any SAML-compliant IDP or access management deployment.

Allow users to sign in with their existing identity from any OIDC-compliant system.

Okta Customer Identity B2B Integration OIDC

Okta is a customisable identity platform. You can quickly deploy separate Okta tenants for each of your customers or partners. Connect them to individual applications for each customer, or connect everyone to a common application.

Employee and customer

Securely segregate your internal workforce and external customer base.

Employee and partner

Separate partner identities to live in distinct entities while preserving all your internal employee identities.

Multi customer

Securely segregate each of your own customers with their own Okta tenant.

Tailor the look and feel of the identity experience from registration to authentication to authorisation to match your partner’s or customer’s brands.

Okta Per app branding

Connect your customer's LDAP or Active Directory; synchronise user accounts to Universal Directory.

On-demand creation of external users at time of authentication
Reduce upfront workload of creating users before they login

Okta Customer Identity B2B Integration AD

Seamlessly import customer identities

Import and synchronise identities from AD/LDAP
Small outbound HTTPS agent which runs on a schedule or manual, built in automatic rules for user creation and can be scoped for a specific user base using standard LDAP queries or OUs
Automatically de-provision user

Centralised directory management

Automatically map users in AD and LDAP to Okta’s Universal Directory
A read-only account is used to execute an LDAP query against AD. The results are automatically sent to Okta and can be used to easily create users
Central view of all your customer's directories

Easily migrate customer profile data from existing user stores with customisable data clean up and profile enrichment. Combine data from multiple sources into Okta’s centralised Universal Directory.

Okta Inline Hooks diagram

Defer authentication to AD or LDAP as the source of truth, which allows you to maintain access controls from your local directory rather than store directory credentials in Okta. Delegated authentication is automatic and allows high availability.

Okta Customer Identity B2B integration Delegated Authentication