### Human: Can you tell about Configuration Steps for Okta Integration with Prism Central. ### Assistant: Okta is a supported Identity Provider that can be integrated with Prism Central for user authentication. This KB documents the steps required to configure Okta integration from both the PC and Okta Administration side.. Nutanix supports several different Identity Providers for integration with Prism Central (PC) including:

Active Directory Federated Services (ADFS)Azure ADFSPingOneShibbolethKeycloakOkta

This document details specifically what needs to be configured on both the Prism Central and Okta Administration side in order to successfully integrate both for user authentication.. From the Okta Administration side:

Create a new SAML 2.0 application
	
	Configure the following SAML settings:
	Single Sign On URL: https://<PC_IP>:9440/api/iam/authn/callback	Audience URI (SP Entity ID): https://<PC_IP>:9440/api/iam/authn		NOTE:	Whether to use the FQDN or PC IP address for above configuration, can be decided by checking the metadata config file from following Prism Page			Check the following entityID and Location fields in metadata xml from PC, highlighted in following screenshot.	Audience URI  should match with entityID URI and Single Sign On URL should match with Location URL in okta settings.					Attribute Statements:

	

	Note: If you intend to assign Groups to the PC Application, then configure the Group Attribute Statement as follows:

	
	Assign Users and/or Groups to the PC Application in Okta
	
	View the Identity Provider metadata from the PC SAML application and save it to your local machine as an .xml file.
				
	

From the Prism Central side:

The Microservices Infrastructure (CMSP) needs to be enabled from the Prism Central Settings -> Manage Prism Central -> Prism Central on Microservices Infrastructure
	

	More detailed information on Microservices enablement can be found on the Nutanix Support Portal at the following link: https://portal.nutanix.com/page/documents/details?targetId=Prism-Central-Guide:mul-cmsp-enable-pc-t.html.
	The Okta Identity Provider can be added from Prism Central Settings > Authentication > Identity Providers
	Note: If you intend to perform Group Role Mapping in PC, then configure the Group Attribute Name as follows:

		
	Assign individual user role mappings from Prism Central Settings > Role Mapping or group role mappings from Administration > Roles
	Note: The format of the username must match Okta's expected "Application username format"

	
	

The user can now authenticate to Prism Central with Okta credentials.

Using Okta Native SAML group:We can also use okta SAML group and assign the required users to this group to enable okta authentication for them.For this we need to do following additional configuration both on Okta and Nutanix side.Configuration from Okta side:1. In the Okta Admin dashboard, go to Directory → GroupsClick on "Add Group" to create a new group and name it.2. Assign people to that groupAfter assigning required people click on "Done"3. Then go the "PC application" on okta side and assign that application to this group.4. Under the Sign On Section of the app, following values need to be given for group attributes.And save the changes for the application settings.Configuration from PC side:1. Modify IDP configuration in PC to specify the 'Group' attribute2. Navigate on PC to Administration → RolesYou can create a custom role or just use one of the built-in ones.3. Then go to "manage assignment" option of that role and create select Okta user_group(SAML) from drop down option.NOTE: Make sure you give exact name for the group as given on okta side, the SAML user/group names does not get auto-populated as PC does not have Okta credentials to query and search user/group from Okta.4. Then you should see the okta group listed under "user_group" in this role information.After completing all the above configuration any user assigned to the group on Okta side should be able to login to PC using Okta.. ### Human: Now explain this as a Nutanix support agent summarizing the answer step by step. In case, you don't know the answer say - I don't know.