[{"data":1,"prerenderedAt":1234},["ShallowReactive",2],{"navigation_docs_de":3,"-de-sign-in-and-directories-okta":427,"-de-sign-in-and-directories-okta-surround":1229},[4,31,117,188,238,271,310,369,378],{"title":5,"icon":6,"path":7,"stem":8,"children":9,"page":30},"Erste Schritte","i-hugeicons-rocket-01","\u002Fde\u002Fgetting-started","de\u002F01.getting-started",[10,15,20,25],{"title":11,"path":12,"stem":13,"icon":14},"Was ist DDM?","\u002Fde\u002Fgetting-started\u002Fwhat-is-ddm","de\u002F01.getting-started\u002F01.what-is-ddm","i-hugeicons-information-circle",{"title":16,"path":17,"stem":18,"icon":19},"Konto und Anmeldung","\u002Fde\u002Fgetting-started\u002Fsign-in","de\u002F01.getting-started\u002F02.sign-in","i-hugeicons-key-01",{"title":21,"path":22,"stem":23,"icon":24},"KI in DDM","\u002Fde\u002Fgetting-started\u002Fai-in-ddm","de\u002F01.getting-started\u002F03.ai-in-ddm","i-hugeicons-ai-magic",{"title":26,"path":27,"stem":28,"icon":29},"Systemstatus","\u002Fde\u002Fgetting-started\u002Fsystem-status","de\u002F01.getting-started\u002F04.system-status","i-hugeicons-activity-03",false,{"title":32,"icon":33,"path":34,"stem":35,"children":36,"page":30},"CMS","i-hugeicons-dashboard-square-01","\u002Fde\u002Fcms","de\u002F02.cms",[37,42,47,52,57,62,67,72,77,82,87,92,97,102,107,112],{"title":38,"path":39,"stem":40,"icon":41},"Das CMS im Überblick","\u002Fde\u002Fcms\u002Foverview","de\u002F02.cms\u002F01.overview","i-hugeicons-compass-01",{"title":43,"path":44,"stem":45,"icon":46},"Dokumente hochladen","\u002Fde\u002Fcms\u002Fupload","de\u002F02.cms\u002F02.upload","i-hugeicons-upload-01",{"title":48,"path":49,"stem":50,"icon":51},"Kategorien","\u002Fde\u002Fcms\u002Fcategories","de\u002F02.cms\u002F03.categories","i-hugeicons-folder-tree",{"title":53,"path":54,"stem":55,"icon":56},"Dokumente bearbeiten","\u002Fde\u002Fcms\u002Fdocuments","de\u002F02.cms\u002F04.documents","i-hugeicons-file-edit",{"title":58,"path":59,"stem":60,"icon":61},"Suchen und filtern","\u002Fde\u002Fcms\u002Fsearch-and-filters","de\u002F02.cms\u002F05.search-and-filters","i-hugeicons-search-01",{"title":63,"path":64,"stem":65,"icon":66},"Gruppen und Rechte","\u002Fde\u002Fcms\u002Fgroups-and-permissions","de\u002F02.cms\u002F06.groups-and-permissions","i-hugeicons-user-multiple",{"title":68,"path":69,"stem":70,"icon":71},"Benutzer","\u002Fde\u002Fcms\u002Fusers","de\u002F02.cms\u002F07.users","i-hugeicons-user-add-01",{"title":73,"path":74,"stem":75,"icon":76},"Freigaben","\u002Fde\u002Fcms\u002Fapprovals","de\u002F02.cms\u002F08.approvals","i-hugeicons-checkmark-badge-01",{"title":78,"path":79,"stem":80,"icon":81},"Märkte und Übersetzungen","\u002Fde\u002Fcms\u002Fmarkets-and-translations","de\u002F02.cms\u002F09.markets-and-translations","i-hugeicons-globe-02",{"title":83,"path":84,"stem":85,"icon":86},"Notizvorlagen","\u002Fde\u002Fcms\u002Fnote-templates","de\u002F02.cms\u002F10.note-templates","i-hugeicons-layout-01",{"title":88,"path":89,"stem":90,"icon":91},"Nutzung und Audit-Log","\u002Fde\u002Fcms\u002Fusage-and-audit","de\u002F02.cms\u002F11.usage-and-audit","i-hugeicons-chart-column",{"title":93,"path":94,"stem":95,"icon":96},"KI-Assistent","\u002Fde\u002Fcms\u002Fassistant","de\u002F02.cms\u002F12.assistant","i-hugeicons-sparkles",{"title":98,"path":99,"stem":100,"icon":101},"Einstellungen","\u002Fde\u002Fcms\u002Fsettings","de\u002F02.cms\u002F13.settings","i-hugeicons-settings-02",{"title":103,"path":104,"stem":105,"icon":106},"Tarife","\u002Fde\u002Fcms\u002Fplans","de\u002F02.cms\u002F14.plans","i-hugeicons-package",{"title":108,"path":109,"stem":110,"icon":111},"Feature-Wünsche","\u002Fde\u002Fcms\u002Ffeature-requests","de\u002F02.cms\u002F15.feature-requests","i-hugeicons-idea-01",{"title":113,"path":114,"stem":115,"icon":116},"Fehler melden","\u002Fde\u002Fcms\u002Fbug-reports","de\u002F02.cms\u002F16.bug-reports","i-hugeicons-bug-01",{"title":118,"icon":119,"path":120,"stem":121,"children":122,"page":30},"App","i-hugeicons-smart-phone-01","\u002Fde\u002Fapp","de\u002F03.app",[123,128,133,138,143,147,152,157,162,167,170,173,176,179,184],{"title":124,"path":125,"stem":126,"icon":127},"Anmelden und zurechtfinden","\u002Fde\u002Fapp\u002Foverview","de\u002F03.app\u002F01.overview","i-hugeicons-login-03",{"title":129,"path":130,"stem":131,"icon":132},"Tabs und geteilte Ansicht","\u002Fde\u002Fapp\u002Ftabs","de\u002F03.app\u002F02.tabs","i-hugeicons-layout-2-column",{"title":134,"path":135,"stem":136,"icon":137},"Dokumente finden und lesen","\u002Fde\u002Fapp\u002Fdocuments","de\u002F03.app\u002F03.documents","i-hugeicons-file-01",{"title":139,"path":140,"stem":141,"icon":142},"Favoriten","\u002Fde\u002Fapp\u002Ffavorites","de\u002F03.app\u002F04.favorites","i-hugeicons-favourite",{"title":144,"path":145,"stem":146,"icon":61},"Suchen","\u002Fde\u002Fapp\u002Fsearch","de\u002F03.app\u002F05.search",{"title":148,"path":149,"stem":150,"icon":151},"Notizen","\u002Fde\u002Fapp\u002Fnotes","de\u002F03.app\u002F06.notes","i-hugeicons-note-edit",{"title":153,"path":154,"stem":155,"icon":156},"Kalender und Termine","\u002Fde\u002Fapp\u002Fcalendar","de\u002F03.app\u002F07.calendar","i-hugeicons-calendar-03",{"title":158,"path":159,"stem":160,"icon":161},"An Kunden senden","\u002Fde\u002Fapp\u002Foutbox","de\u002F03.app\u002F08.outbox","i-hugeicons-sent",{"title":163,"path":164,"stem":165,"icon":166},"Offline arbeiten","\u002Fde\u002Fapp\u002Foffline","de\u002F03.app\u002F09.offline","i-hugeicons-wifi-off-01",{"title":93,"path":168,"stem":169,"icon":96},"\u002Fde\u002Fapp\u002Fassistant","de\u002F03.app\u002F10.assistant",{"title":98,"path":171,"stem":172,"icon":101},"\u002Fde\u002Fapp\u002Fsettings","de\u002F03.app\u002F11.settings",{"title":108,"path":174,"stem":175,"icon":111},"\u002Fde\u002Fapp\u002Ffeature-requests","de\u002F03.app\u002F12.feature-requests",{"title":113,"path":177,"stem":178,"icon":116},"\u002Fde\u002Fapp\u002Fbug-reports","de\u002F03.app\u002F13.bug-reports",{"title":180,"path":181,"stem":182,"icon":183},"Desktop-App","\u002Fde\u002Fapp\u002Fdesktop-app","de\u002F03.app\u002F14.desktop-app","i-hugeicons-computer",{"title":185,"path":186,"stem":187,"icon":119},"Mobile App","\u002Fde\u002Fapp\u002Fmobile-app","de\u002F03.app\u002F15.mobile-app",{"title":189,"icon":190,"path":191,"stem":192,"children":193,"page":30},"Anmeldung & Verzeichnisse","i-hugeicons-security-check","\u002Fde\u002Fsign-in-and-directories","de\u002F04.sign-in-and-directories",[194,198,202,207,212,217,222,226,230,234],{"title":195,"path":196,"stem":197,"icon":19},"Anmeldeverfahren","\u002Fde\u002Fsign-in-and-directories\u002Fsign-in-methods","de\u002F04.sign-in-and-directories\u002F01.sign-in-methods",{"title":199,"path":200,"stem":201,"icon":190},"Single Sign-on","\u002Fde\u002Fsign-in-and-directories\u002Fsingle-sign-on","de\u002F04.sign-in-and-directories\u002F02.single-sign-on",{"title":203,"path":204,"stem":205,"icon":206},"Verzeichnisdienste (LDAP)","\u002Fde\u002Fsign-in-and-directories\u002Fdirectory-services","de\u002F04.sign-in-and-directories\u002F03.directory-services","i-hugeicons-hierarchy",{"title":208,"path":209,"stem":210,"icon":211},"Abgleich und Anmeldung","\u002Fde\u002Fsign-in-and-directories\u002Fdirectory-sync","de\u002F04.sign-in-and-directories\u002F04.directory-sync","i-hugeicons-refresh",{"title":213,"path":214,"stem":215,"icon":216},"Microsoft Entra ID","\u002Fde\u002Fsign-in-and-directories\u002Fmicrosoft-entra-id","de\u002F04.sign-in-and-directories\u002F05.microsoft-entra-id","i-hugeicons-building-03",{"title":218,"path":219,"stem":220,"icon":221},"Okta","\u002Fde\u002Fsign-in-and-directories\u002Fokta","de\u002F04.sign-in-and-directories\u002F06.okta","i-hugeicons-finger-print",{"title":223,"path":224,"stem":225,"icon":81},"Google Workspace","\u002Fde\u002Fsign-in-and-directories\u002Fgoogle-workspace","de\u002F04.sign-in-and-directories\u002F07.google-workspace",{"title":227,"path":228,"stem":229,"icon":119},"Zwei-Faktor-Authentifizierung","\u002Fde\u002Fsign-in-and-directories\u002Ftwo-factor-authentication","de\u002F04.sign-in-and-directories\u002F08.two-factor-authentication",{"title":231,"path":232,"stem":233,"icon":221},"Passkeys","\u002Fde\u002Fsign-in-and-directories\u002Fpasskeys","de\u002F04.sign-in-and-directories\u002F09.passkeys",{"title":235,"path":236,"stem":237,"icon":156},"Kalender-Freigabe","\u002Fde\u002Fsign-in-and-directories\u002Fcalendar-access","de\u002F04.sign-in-and-directories\u002F10.calendar-access",{"title":239,"icon":240,"path":241,"stem":242,"children":243,"page":30},"MCP-Server","i-hugeicons-ai-network","\u002Fde\u002Fmcp-server","de\u002F05.mcp-server",[244,248,253,257,262,266],{"title":245,"path":246,"stem":247,"icon":240},"Überblick","\u002Fde\u002Fmcp-server\u002Foverview","de\u002F05.mcp-server\u002F01.overview",{"title":249,"path":250,"stem":251,"icon":252},"Einrichten","\u002Fde\u002Fmcp-server\u002Fsetup","de\u002F05.mcp-server\u002F02.setup","i-hugeicons-plug-socket",{"title":254,"path":255,"stem":256,"icon":111},"Was Sie damit tun können","\u002Fde\u002Fmcp-server\u002Fuse-cases","de\u002F05.mcp-server\u002F03.use-cases",{"title":258,"path":259,"stem":260,"icon":261},"Werkzeuge","\u002Fde\u002Fmcp-server\u002Ftools","de\u002F05.mcp-server\u002F04.tools","i-hugeicons-wrench-01",{"title":263,"path":264,"stem":265,"icon":76},"Änderungen freigeben","\u002Fde\u002Fmcp-server\u002Fapproving-changes","de\u002F05.mcp-server\u002F05.approving-changes",{"title":267,"path":268,"stem":269,"icon":270},"Verwaltung & Sicherheit","\u002Fde\u002Fmcp-server\u002Fadmin-and-security","de\u002F05.mcp-server\u002F06.admin-and-security","i-hugeicons-shield-key",{"title":272,"icon":273,"path":274,"stem":275,"children":276,"page":30},"Externe Quellen","i-hugeicons-database-sync","\u002Fde\u002Fexternal-sources","de\u002F06.external-sources",[277,280,285,290,295,300,305],{"title":245,"path":278,"stem":279,"icon":273},"\u002Fde\u002Fexternal-sources\u002Foverview","de\u002F06.external-sources\u002F01.overview",{"title":281,"path":282,"stem":283,"icon":284},"SharePoint","\u002Fde\u002Fexternal-sources\u002Fsharepoint","de\u002F06.external-sources\u002F02.sharepoint","i-hugeicons-microsoft",{"title":286,"path":287,"stem":288,"icon":289},"OneDrive","\u002Fde\u002Fexternal-sources\u002Fonedrive","de\u002F06.external-sources\u002F03.onedrive","i-hugeicons-folder-cloud",{"title":291,"path":292,"stem":293,"icon":294},"Google Drive","\u002Fde\u002Fexternal-sources\u002Fgoogle-drive","de\u002F06.external-sources\u002F04.google-drive","i-hugeicons-google-drive",{"title":296,"path":297,"stem":298,"icon":299},"FTP \u002F SFTP","\u002Fde\u002Fexternal-sources\u002Fftp-sftp","de\u002F06.external-sources\u002F05.ftp-sftp","i-hugeicons-server-stack-01",{"title":301,"path":302,"stem":303,"icon":304},"REST-Schnittstelle","\u002Fde\u002Fexternal-sources\u002Frest","de\u002F06.external-sources\u002F06.rest","i-hugeicons-api",{"title":306,"path":307,"stem":308,"icon":309},"SOAP-Schnittstelle","\u002Fde\u002Fexternal-sources\u002Fsoap","de\u002F06.external-sources\u002F07.soap","i-hugeicons-source-code",{"title":311,"icon":304,"path":312,"stem":313,"children":314,"page":30},"Integrations-API","\u002Fde\u002Fintegration-api","de\u002F07.integration-api",[315,318,322,327,332,337,341,346,350,354,359,364],{"title":245,"path":316,"stem":317,"icon":14},"\u002Fde\u002Fintegration-api\u002Foverview","de\u002F07.integration-api\u002F01.overview",{"title":319,"path":320,"stem":321,"icon":19},"Authentifizierung","\u002Fde\u002Fintegration-api\u002Fauthentication","de\u002F07.integration-api\u002F02.authentication",{"title":323,"path":324,"stem":325,"icon":326},"Konventionen","\u002Fde\u002Fintegration-api\u002Fconventions","de\u002F07.integration-api\u002F03.conventions","i-hugeicons-book-open-01",{"title":328,"path":329,"stem":330,"icon":331},"Dokumente einspielen","\u002Fde\u002Fintegration-api\u002Fpushing-documents","de\u002F07.integration-api\u002F04.pushing-documents","i-hugeicons-upload-02",{"title":333,"path":334,"stem":335,"icon":336},"Inhalte abrufen","\u002Fde\u002Fintegration-api\u002Fconsuming-content","de\u002F07.integration-api\u002F05.consuming-content","i-hugeicons-download-02",{"title":338,"path":339,"stem":340,"icon":137},"Referenz: Dokumente","\u002Fde\u002Fintegration-api\u002Freference-documents","de\u002F07.integration-api\u002F06.reference-documents",{"title":342,"path":343,"stem":344,"icon":345},"Referenz: Kategorien, Schlagwörter, Märkte","\u002Fde\u002Fintegration-api\u002Freference-categories-tags","de\u002F07.integration-api\u002F07.reference-categories-tags","i-hugeicons-folder-01",{"title":347,"path":348,"stem":349,"icon":211},"Referenz: Abgleich-Manifest","\u002Fde\u002Fintegration-api\u002Freference-sync","de\u002F07.integration-api\u002F08.reference-sync",{"title":351,"path":352,"stem":353,"icon":309},"OpenAPI","\u002Fde\u002Fintegration-api\u002Fopenapi","de\u002F07.integration-api\u002F09.openapi",{"title":355,"path":356,"stem":357,"icon":358},"Änderungsprotokoll","\u002Fde\u002Fintegration-api\u002Fchangelog","de\u002F07.integration-api\u002F10.changelog","i-hugeicons-time-schedule",{"title":360,"path":361,"stem":362,"icon":363},"Referenz: Gruppen, Märkte, Zugriff","\u002Fde\u002Fintegration-api\u002Freference-groups-access","de\u002F07.integration-api\u002F11.reference-groups-access","i-hugeicons-user-lock-01",{"title":365,"path":366,"stem":367,"icon":368},"Umstieg von CMWS","\u002Fde\u002Fintegration-api\u002Fcmws","de\u002F07.integration-api\u002F12.cmws","i-hugeicons-arrow-reload-horizontal",{"title":370,"icon":371,"path":372,"stem":373,"children":374,"page":30},"Neuigkeiten","i-hugeicons-gift","\u002Fde\u002Fwhats-new","de\u002F08.whats-new",[375],{"title":355,"path":376,"stem":377,"icon":358},"\u002Fde\u002Fwhats-new\u002Fchangelog","de\u002F08.whats-new\u002F01.changelog",{"title":379,"icon":299,"path":380,"stem":381,"children":382,"page":30},"Selbst betreiben","\u002Fde\u002Fself-hosting","de\u002F09.self-hosting",[383,386,390,395,399,404,408,413,418,422],{"title":245,"path":384,"stem":385,"icon":14},"\u002Fde\u002Fself-hosting\u002Foverview","de\u002F09.self-hosting\u002F01.overview",{"title":387,"path":388,"stem":389,"icon":106},"Docker Compose","\u002Fde\u002Fself-hosting\u002Fdocker-compose","de\u002F09.self-hosting\u002F02.docker-compose",{"title":391,"path":392,"stem":393,"icon":394},"Kubernetes","\u002Fde\u002Fself-hosting\u002Fkubernetes","de\u002F09.self-hosting\u002F03.kubernetes","i-hugeicons-cloud",{"title":396,"path":397,"stem":398,"icon":101},"Konfiguration","\u002Fde\u002Fself-hosting\u002Fconfiguration","de\u002F09.self-hosting\u002F04.configuration",{"title":400,"path":401,"stem":402,"icon":403},"Lizenz","\u002Fde\u002Fself-hosting\u002Flicence","de\u002F09.self-hosting\u002F05.licence","i-hugeicons-license",{"title":405,"path":406,"stem":407,"icon":211},"Updates","\u002Fde\u002Fself-hosting\u002Fupdates","de\u002F09.self-hosting\u002F06.updates",{"title":409,"path":410,"stem":411,"icon":412},"Postgres","\u002Fde\u002Fself-hosting\u002Fpostgres","de\u002F09.self-hosting\u002F07.postgres","i-hugeicons-database",{"title":414,"path":415,"stem":416,"icon":417},"Sicherung","\u002Fde\u002Fself-hosting\u002Fbackups","de\u002F09.self-hosting\u002F08.backups","i-hugeicons-database-restore",{"title":419,"path":420,"stem":421,"icon":261},"Fehlerbehebung","\u002Fde\u002Fself-hosting\u002Ftroubleshooting","de\u002F09.self-hosting\u002F09.troubleshooting",{"title":423,"path":424,"stem":425,"icon":426},"Firewall","\u002Fde\u002Fself-hosting\u002Ffirewall","de\u002F09.self-hosting\u002F10.firewall","i-hugeicons-firewall",{"id":428,"title":218,"body":429,"description":1222,"extension":1223,"links":1224,"meta":1225,"navigation":1226,"path":219,"seo":1227,"stem":220,"__hash__":1228},"docs_de\u002Fde\u002F04.sign-in-and-directories\u002F06.okta.md",{"type":430,"value":431,"toc":1205},"minimark",[432,443,454,459,580,584,595,675,692,711,715,718,780,818,822,946,950,1053,1057,1064,1067,1159,1176,1180],[433,434,435,436,439,440,442],"p",{},"Mit Okta melden sich Ihre Leute über Ihre Okta-Anmeldeseite bei DDM an – mit Ihren Okta-Richtlinien und Ihrer MFA. Sie legen in Okta eine App-Integration an und tragen sie in DDM unter ",[437,438,98],"strong",{}," › ",[437,441,199],{}," ein.",[433,444,445,446,449,450,453],{},"Sie brauchen einen Okta-Administrator, der App-Integrationen anlegen darf (",[437,447,448],{},"Super Administrator"," oder ",[437,451,452],{},"Application Administrator",").",[455,456,458],"h2",{"id":457},"_1-app-integration-anlegen","1. App-Integration anlegen",[460,461,463,468,492,496,543,547,558,562],"steps",{"level":462},"3",[464,465,467],"h3",{"id":466},"neue-integration","Neue Integration",[433,469,470,471,439,474,439,476,479,480,483,484,487,488,491],{},"In der Okta Admin Console unter ",[437,472,473],{},"Applications",[437,475,473],{},[437,477,478],{},"Create App Integration",". Wählen Sie ",[437,481,482],{},"OIDC – OpenID Connect"," und ",[437,485,486],{},"Web Application",", dann ",[437,489,490],{},"Next",".",[464,493,495],{"id":494},"allgemeine-einstellungen","Allgemeine Einstellungen",[497,498,499,510,519,537],"ul",{},[500,501,502,505,506],"li",{},[437,503,504],{},"App integration name:"," ",[507,508,509],"code",{},"DDM",[500,511,512,505,515,518],{},[437,513,514],{},"Grant type:",[437,516,517],{},"Authorization Code"," (vorausgewählt)",[500,520,521,524,525,528,529,439,531,533,534],{},[437,522,523],{},"Sign-in redirect URIs:"," die ",[437,526,527],{},"Umleitungs-URI"," aus DDM, ",[437,530,98],{},[437,532,199],{}," – z. B. ",[507,535,536],{},"https:\u002F\u002Fcms.documentdistributionmanager.com\u002Fapi\u002Fauth\u002Fsso\u002Fcallback",[500,538,539,542],{},[437,540,541],{},"Sign-out redirect URIs:"," leer lassen",[464,544,546],{"id":545},"zuweisungen","Zuweisungen",[433,548,549,550,553,554,557],{},"Wählen Sie unter ",[437,551,552],{},"Controlled access",", wer DDM nutzen darf – alle in Ihrer Organisation oder ausgewählte Gruppen. Später ändern Sie das im Reiter ",[437,555,556],{},"Assignments"," der App.",[464,559,561],{"id":560},"speichern","Speichern",[433,563,564,565,568,569,572,573,576,577,491],{},"Klicken Sie auf ",[437,566,567],{},"Save",". Kopieren Sie im Reiter ",[437,570,571],{},"General"," der App die ",[437,574,575],{},"Client ID"," und das ",[437,578,579],{},"Client secret",[455,581,583],{"id":582},"_2-in-ddm-eintragen","2. In DDM eintragen",[433,585,586,587,439,589,439,591,594],{},"Unter ",[437,588,98],{},[437,590,199],{},[437,592,593],{},"Identitätsanbieter",":",[596,597,598,611],"table",{},[599,600,601],"thead",{},[602,603,604,608],"tr",{},[605,606,607],"th",{},"Feld",[605,609,610],{},"Wert",[612,613,614,628,644,654,663],"tbody",{},[602,615,616,622],{},[617,618,619],"td",{},[437,620,621],{},"Beschriftung",[617,623,624,625,627],{},"z. B. ",[507,626,218],{}," oder der Name Ihrer Firma",[602,629,630,635],{},[617,631,632],{},[437,633,634],{},"Aussteller (Issuer)",[617,636,637,640,641],{},[507,638,639],{},"https:\u002F\u002F\u003CIhre Org>.okta.com"," – die Adresse Ihres Okta, ohne ",[507,642,643],{},"-admin",[602,645,646,651],{},[617,647,648],{},[437,649,650],{},"Client-ID",[617,652,653],{},"aus Okta",[602,655,656,661],{},[617,657,658],{},[437,659,660],{},"Geheimer Clientschlüssel",[617,662,653],{},[602,664,665,670],{},[617,666,667],{},[437,668,669],{},"E-Mail-Anspruch (Claim)",[617,671,672],{},[507,673,674],{},"email",[433,676,564,677,679,680,683,684,687,688,491],{},[437,678,561],{},", dann auf ",[437,681,682],{},"Verbindung testen",", und schalten Sie ",[437,685,686],{},"Single Sign-on aktiv"," ein – siehe ",[689,690,199],"a",{"href":691},"\u002Fde\u002Fsign-in-and-directories\u002Fsingle-sign-on#_4-einschalten",[693,694,695,696,699,700,439,703,706,707,710],"tip",{},"Nutzt Ihre Firma in Okta einen ",[437,697,698],{},"eigenen Autorisierungsserver"," (",[437,701,702],{},"Security",[437,704,705],{},"API","), nehmen Sie dessen Aussteller – z. B. ",[507,708,709],{},"https:\u002F\u002F\u003CIhre Org>.okta.com\u002Foauth2\u002Fdefault",". Beides funktioniert; der Aussteller steht auf der Einstellungsseite des Autorisierungsservers.",[455,712,714],{"id":713},"gruppen-zuordnen","Gruppen zuordnen",[433,716,717],{},"Damit DDM Ihre Leute anhand ihrer Okta-Gruppen Gruppen zuordnet:",[719,720,721,735,763],"ol",{},[500,722,723,724,727,728,731,732,491],{},"Öffnen Sie in Okta den Reiter ",[437,725,726],{},"Sign On"," der App und klicken Sie unter ",[437,729,730],{},"OpenID Connect ID Token"," auf ",[437,733,734],{},"Edit",[500,736,737,738,731,741,744,745,748,749,505,752,755,756,505,759,762],{},"Setzen Sie ",[437,739,740],{},"Groups claim type",[437,742,743],{},"Filter",", den Namen des Anspruchs auf ",[507,746,747],{},"groups"," und einen Filter – z. B. ",[437,750,751],{},"Matches regex",[507,753,754],{},".*"," für alle Gruppen oder ",[437,757,758],{},"Starts with",[507,760,761],{},"DDM-"," nur für die, die für DDM gedacht sind. Speichern.",[500,764,765,766,505,769,771,772,775,776,779],{},"Tragen Sie in DDM unter ",[437,767,768],{},"Gruppen",[507,770,747],{}," als ",[437,773,774],{},"Gruppen-Anspruch (Claim)"," ein und fügen Sie für jede Gruppe eine Zuordnung hinzu: den ",[437,777,778],{},"Namen"," der Okta-Gruppe und die DDM-Gruppe.",[693,781,782,783,699,785,788,789,439,791,793,794,439,797,800,801,803,804,807,808,811,812,814,815,442],{},"Mit einem ",[437,784,698],{},[507,786,787],{},"…\u002Foauth2\u002Fdefault",") richten Sie den Gruppen-Anspruch stattdessen dort ein – unter ",[437,790,702],{},[437,792,705],{}," › der Server › ",[437,795,796],{},"Claims",[437,798,799],{},"Add Claim",", Name ",[507,802,747],{},", im ",[437,805,806],{},"ID Token"," enthalten, Werttyp ",[437,809,810],{},"Groups",". Beschränken Sie ihn auf einen Bereich, tragen Sie diesen Bereich (z. B. ",[507,813,747],{},") in DDM unter ",[437,816,817],{},"Bereiche (Scopes)",[455,819,821],{"id":820},"stattdessen-mit-saml","Stattdessen mit SAML",[719,823,824,838,852,887,923,940],{},[500,825,826,827,439,829,831,832,483,834,837],{},"Fügen Sie unter ",[437,828,98],{},[437,830,199],{}," einen Anbieter mit ",[437,833,218],{},[437,835,836],{},"SAML 2.0"," hinzu. DDM zeigt drei Werte dafür.",[500,839,840,841,439,843,439,845,439,847,849,850,491],{},"Gehen Sie in Okta zu ",[437,842,473],{},[437,844,473],{},[437,846,478],{},[437,848,836],{}," und nennen Sie sie ",[507,851,509],{},[500,853,854,855,524,858,861,862,865,866,861,869,872,873,876,877,880,881,876,884,491],{},"Tragen Sie unter ",[437,856,857],{},"Configure SAML",[437,859,860],{},"Antwort-URL (ACS-URL)"," aus DDM als ",[437,863,864],{},"Single sign-on URL"," ein und den ",[437,867,868],{},"Bezeichner (Entity ID)",[437,870,871],{},"Audience URI (SP Entity ID)",". ",[437,874,875],{},"Name ID format",": ",[507,878,879],{},"EmailAddress",", ",[437,882,883],{},"Application username",[507,885,886],{},"Email",[500,888,826,889,505,892,894,895,880,898,894,901,483,904,894,907,910,911,914,915,917,918,920,921,442],{},[437,890,891],{},"Attribute Statements",[507,893,674],{}," → ",[507,896,897],{},"user.email",[507,899,900],{},"firstName",[507,902,903],{},"user.firstName",[507,905,906],{},"lastName",[507,908,909],{},"user.lastName"," hinzu. Für Gruppen fügen Sie ein ",[437,912,913],{},"Group Attribute Statement"," namens ",[507,916,747],{}," mit einem Filter hinzu, wie oben – und tragen ",[507,919,747],{}," in DDM als ",[437,922,774],{},[500,924,925,926,929,930,932,933,439,936,939],{},"Kopieren Sie nach dem Speichern die ",[437,927,928],{},"Metadata URL"," aus dem Reiter ",[437,931,726],{}," der App und tragen Sie sie in DDM unter ",[437,934,935],{},"Metadaten Ihres Anbieters",[437,937,938],{},"Metadaten-URL"," ein. Speichern.",[500,941,942,943,945],{},"Weisen Sie Personen oder Gruppen unter ",[437,944,556],{}," zu.",[455,947,949],{"id":948},"häufige-fehler","Häufige Fehler",[596,951,952,965],{},[599,953,954],{},[602,955,956,959,962],{},[605,957,958],{},"Meldung",[605,960,961],{},"Ursache",[605,963,964],{},"Lösung",[612,966,967,985,1001,1020,1036],{},[602,968,969,979,982],{},[617,970,971,974,975],{},[507,972,973],{},"400 Bad Request"," – ",[976,977,978],"em",{},"The 'redirect_uri' parameter must be a Login redirect URI",[617,980,981],{},"Die Umleitungs-URI in Okta weicht von der in DDM ab",[617,983,984],{},"Erneut aus DDM kopieren.",[602,986,987,992,995],{},[617,988,989],{},[976,990,991],{},"User is not assigned to the client application",[617,993,994],{},"Die Person ist der App nicht zugewiesen",[617,996,997,998,1000],{},"Sie oder ihre Gruppe unter ",[437,999,556],{}," zuweisen.",[602,1002,1003,1009,1015],{},[617,1004,1005,1008],{},[437,1006,1007],{},"Unter diesem Aussteller gibt es kein Discovery-Dokument"," (in DDM, beim Speichern)",[617,1010,1011,1012,1014],{},"Der Aussteller enthält ",[507,1013,643],{}," oder einen Pfad, den es nicht gibt",[617,1016,1017,1019],{},[507,1018,639],{}," nehmen.",[602,1021,1022,1027,1030],{},[617,1023,1024],{},[437,1025,1026],{},"Der Anbieter hat Client-ID oder Schlüssel abgelehnt",[617,1028,1029],{},"Unvollständig kopiert, oder der Schlüssel wurde erneuert",[617,1031,1032,1033,1035],{},"Beides erneut aus dem Reiter ",[437,1034,571],{}," kopieren.",[602,1037,1038,1043,1050],{},[617,1039,1040],{},[437,1041,1042],{},"Ihre E-Mail-Adresse liegt auf keiner bestätigten Domain Ihrer Organisation",[617,1044,1045,1046,1049],{},"Die ",[437,1047,1048],{},"Primary email"," der Person in Okta liegt auf einer anderen Domain",[617,1051,1052],{},"In Okta korrigieren oder die Domain in DDM bestätigen.",[455,1054,1056],{"id":1055},"alternativ-die-ldap-schnittstelle-von-okta","Alternativ: die LDAP-Schnittstelle von Okta",[433,1058,1059,1060,1063],{},"Okta kann seine Benutzer auch als LDAP-Verzeichnis anbieten. Als ",[689,1061,1062],{"href":204},"Verzeichnisdienst"," angebunden, übernimmt DDM Ihre Leute vorab aus Okta, ordnet sie anhand ihrer Okta-Gruppen Gruppen zu und sperrt Deaktivierte – sie tippen ihr Okta-Kennwort dann aber in die Anmeldeseite von DDM, ohne die MFA von Okta.",[433,1065,1066],{},"Beides lässt sich kombinieren: Der Verzeichnisdienst übernimmt und sortiert die Personen, Single Sign-on meldet sie an.",[596,1068,1069,1077],{},[599,1070,1071],{},[602,1072,1073,1075],{},[605,1074,607],{},[605,1076,610],{},[612,1078,1079,1091,1108,1120,1134,1147],{},[602,1080,1081,1086],{},[617,1082,1083],{},[437,1084,1085],{},"Host",[617,1087,1088],{},[507,1089,1090],{},"\u003CIhre Org>.ldap.okta.com",[602,1092,1093,1102],{},[617,1094,1095,1098,1099],{},[437,1096,1097],{},"Port"," \u002F ",[437,1100,1101],{},"TLS erzwingen",[617,1103,1104,1107],{},[507,1105,1106],{},"636"," \u002F an",[602,1109,1110,1115],{},[617,1111,1112],{},[437,1113,1114],{},"Base DN",[617,1116,1117],{},[507,1118,1119],{},"dc=\u003CIhre Org>,dc=okta,dc=com",[602,1121,1122,1127],{},[617,1123,1124],{},[437,1125,1126],{},"Bind DN",[617,1128,1129,1130,1133],{},"ein Read-Only-Administrator, z. B. ",[507,1131,1132],{},"uid=svc-ddm@firma.de,dc=\u003CIhre Org>,dc=okta,dc=com"," – das genaue Format zeigt Okta auf der Seite der LDAP-Schnittstelle",[602,1135,1136,1142],{},[617,1137,1138,1141],{},[437,1139,1140],{},"Such-Base DN"," der Abfrage",[617,1143,1144],{},[507,1145,1146],{},"ou=users,dc=\u003CIhre Org>,dc=okta,dc=com",[602,1148,1149,1154],{},[617,1150,1151],{},[437,1152,1153],{},"Suchfilter",[617,1155,1156],{},[507,1157,1158],{},"(&(objectClass=inetOrgPerson)(mail=*))",[433,1160,1161,1162,439,1165,439,1168,1171,1172,1175],{},"Die Schnittstelle schalten Sie in Okta unter ",[437,1163,1164],{},"Directory",[437,1166,1167],{},"Directory Integrations",[437,1169,1170],{},"Add LDAP Interface"," ein; prüfen Sie in der Vorschau, ob Ihre Okta-Gruppen unter ",[437,1173,1174],{},"memberOf"," erscheinen.",[455,1177,1179],{"id":1178},"okta-anmeldung-für-die-ganze-installation","Okta-Anmeldung für die ganze Installation",[433,1181,1182,1183,1186,1187,880,1190,483,1193,1196,1197,1200,1201,1204],{},"Der Betrieb einer DDM-Installation kann außerdem ",[437,1184,1185],{},"Mit Okta anmelden"," für alle Organisationen darauf anbieten – mit einer Okta-App für alle, eingerichtet auf dem Server: ",[507,1188,1189],{},"OKTA_CLIENT_ID",[507,1191,1192],{},"OKTA_CLIENT_SECRET",[507,1194,1195],{},"OKTA_ISSUER"," (z. B. ",[507,1198,1199],{},"https:\u002F\u002Ffirma.okta.com","), Umleitungs-URI ",[507,1202,1203],{},"\u003CBETTER_AUTH_URL>\u002Fapi\u002Fauth\u002Fcallback\u002Fokta",". Die Schaltfläche erscheint, sobald alle drei gesetzt sind. Wie die Microsoft- und die Google-Anmeldung für die ganze Installation legt sie keine Mitgliedschaften an und ist für alle gleich; sie passt zu einer eigenen Installation für eine einzige Firma. Eine Organisation, die ihr eigenes Okta, eigene Regeln oder eine Gruppenzuordnung will, nutzt Single Sign-on wie oben beschrieben.",{"title":1206,"searchDepth":1207,"depth":1207,"links":1208},"",2,[1209,1216,1217,1218,1219,1220,1221],{"id":457,"depth":1207,"text":458,"children":1210},[1211,1213,1214,1215],{"id":466,"depth":1212,"text":467},3,{"id":494,"depth":1212,"text":495},{"id":545,"depth":1212,"text":546},{"id":560,"depth":1212,"text":561},{"id":582,"depth":1207,"text":583},{"id":713,"depth":1207,"text":714},{"id":820,"depth":1207,"text":821},{"id":948,"depth":1207,"text":949},{"id":1055,"depth":1207,"text":1056},{"id":1178,"depth":1207,"text":1179},"Das Okta Ihrer Organisation anbinden – eine OpenID-Connect-App-Integration anlegen und in DDM eintragen.","md",null,{},{"icon":221},{"title":218,"description":1222},"Tj03OAjgkNlpPtVhbMdihDihBQf_NU0h5kg2OZ5LvRo",[1230,1232],{"title":213,"path":214,"stem":215,"description":1231,"icon":216,"children":-1},"Das Entra ID Ihrer Organisation (früher Azure AD) anbinden – DDM im eigenen Mandanten registrieren und in DDM eintragen.",{"title":223,"path":224,"stem":225,"description":1233,"icon":81,"children":-1},"Das Google Workspace Ihrer Organisation anbinden – einen OAuth-Client anlegen und in DDM eintragen.",1793617727955]