In an Okta Org2Org configuration, users typically access the Spoke tenant dashboard, select the Org2Org icon, and navigate to the Hub dashboard to access assigned applications. Creating a Bookmark application in the Spoke organization allows users to bypass the Hub dashboard and launch the Hub application directly.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Integration Network (OIN)
• Org2Org
• Bookmark App

How is a Bookmark application configured to access Hub applications from a Spoke organization?

Create a Bookmark application in the Spoke organization using the Identity Provider Single Sign-On URL and the Hub application embedded link.

1. Sign in to the Hub organization Admin Console.
2. Navigate to Applications > Applications and select the target application.
3. Select the General tab and copy the App Embed Link.
   
4. Locate the Org2Org Identity Provider (IdP) settings in the Hub organization and copy the IdP Single Sign On URL.
   
5. Sign in to the Spoke organization Admin Console.
6. Navigate to Applications > Applications.
7. Select Add Application and add the Bookmark App.
8. Enter a descriptive name for the application.
9. Enter the IdP Single Sign On URL into the URL field.
10. Append ?RelayState= to the end of the URL value.
11. Append the App Embed Link copied from the Hub organization to the end of the ?RelayState= value.
    • The final URL format appears as follows:

    <IdPSingleSignOnURL>?RelayState=<AppEmbeddedLink>

    • Example:

    http://<sourceorg>.okta.com/app/okta_org2org/<idp_id>/sso/saml?RelayState=http://<huborg>.okta.com/home/google/<app_id>/26

12. Select Save.

Related References

• Configure an Application for Hub/Spoke
• How to Create a Bookmark App