Configuring Single Sign-On for Preference Centers

The first step to configuring Preference Centers for SSO authentication is to create a web application in your IdP. When creating the web application in your IdP, you must ensure that OpenID Connect (OIDC) is selected as the sign on method. Once you've created the web application in your IdP, you will then proceed to configure SSO in the OneTrust application.

Next, you will need to enable Single Sign-On for the Preference Center and begin configuring details regarding your IdP in the OneTrust application.

1. On the Universal Consent & Preference Management menu, select Interfaces > Preference Centers. The Preference Centers screen appears.

2. Click the link in the Name column for the Multi Page Preference Center for which you want to enable SSO. The Builder tab on the Preference Center Details screen appears.

3. Navigate to the Settings tab.

4. In the Preference Center Login section, enable the Enable Single Sign-On to the Preference Center setting. The Identity Provider Configuration field appears.

   
   
   

5. Click the Identity Provider Configuration field, and select the Add New option. The Identity Provider Setup modal appears.

   
   
   

   Field

   Description

   Identity Provider Name

   Enter a name to identify the IdP configuration that you are setting up.

   Base URL

   Enter the URL for the authorization server. This URL can be found within your IdP.

   For example, you would copy the value in the Issuer URI field in Okta and paste the copied value in this field.

   Note:

   Depending on your IdP, the name of the field that contains the URL for the authorization server may vary.

6. Complete the fields, as necessary.

7. Click the Validate button. The Identity Provider Configuration section appears.

   
   
   

Once you've validated your IdP configuration within the OneTrust application, you'll need to safelist the Preference Center URL in your IdP.

1. In the Identity Provider Configuration section within the OneTrust application, navigate to the Published Preference Center URL field and click the Copy button. This will copy the URL for the Preference Center, which you will add within your IdP.

   
   
   

2. In your IdP, paste the copied Preference Center URL in the redirect URL field for the web application you created. This will safelist the Preference Center URL for redirection, which means that your IdP will redirect users to this URL once they have been authenticated via SSO.

   For example, you would paste the copied Preference Center URL in the Login Redirect URL field in Okta. Then, once Okta authenticates a user's sign in request, the user will be redirected to the Preference Center.

   Note:

   Depending on your IdP, the name of the redirect URL field may vary.

Lastly, you'll enter your authentication credentials for your IdP within the Require Authentication Credentials section of the configuration in the OneTrust application.

1. Navigate back to the Identity Provider Configuration section on the Settings tab for the Multi Page Preference Center in the OneTrust application.

2. Complete the fields in the Required Authentication Credentials section.

   
   
   

   Field

   Description

   Grant Type

   Authorization Code is currently the only supported grant type and is selected by default.

   Client ID

   Copy the Client ID from the Client Credentials found within your IdP and paste the copied value in this field.

   Client Key

   Copy the Client Secret from the Client Credentials found within your IdP and paste the copied value in this field.

3. Click the Save button.