Skip to main content

Configure Okta SSO

Configure your Okta account to activate the SSO login

⚠️ This article has been updated.
The setup flow below reflects the new Descope-mediated path. If you configured Okta SSO before this change, the original instructions (OIN catalog method) are preserved below for reference.

Set Up Okta SSO Using the Legacy OIN Method

After completing the steps in this guide you will be able to use Okta to log in to the Scytale application (both SP-initiated SSO and IdP-initiated SSO are supported).

The process consists of 3 parts:

  1. Install the Scytale application from Okta's app catalog

  2. Provide your Scytale customer success team with the app Metadata URL

  3. Define which users are allowed to log to Scytale using SSO
    ​

Okta SSO is a premium feature, you will need your customer success agent in order to complete the process.

1. Install the Scytale application from Okta's app catalog

  1. Using your Okta admin account, go to Applications → Browse App Catalog
    ​

    image-20231029-083500

  2. Search for "Scytale" and click on the app you see in the picture below

    image-20231029-083642


    ​

  3. Click on “Add Integration”

    image-20231029-083758


    ​

  4. Click “Done“

    image-20231029-084128


    ​

Congrats! You have successfully installed Scytale on your Okta account. Please continue to the next step.

2. Provide your Scytale contact with the app Metadata URL

  1. Go to Application on the sidebar and click on Scytale

    image-20231122-131106


    ​

  2. Go to the SignOn tab and copy the metadata URL as shown in the picture

    image-20231122-131301


    ​

  3. Provide this link to Scytale's customer success team. They will do the rest.
    ​

You’re done! Wait for a confirmation from the CS team that everything is OK and you’re good to go. While you wait, continue to the next step.

3. Define which users are allowed to log to Scytale using SSO

  1. Using the side panel, go to “Applications“ and click on the freshly installed Scytale app from the list

    okta-sso-5

  2. Click “Assign“ and select whether to assign to certain people or groups

    okta-sso-6

  3. Select the users to add from the available users list. Only those users will be able to log in to Scytale using SSO.
    ​

Finally, reach out to your Scytale contact. If you don’t have one, open a ticket with the Support team and they’ll respond quickly.

How To Set Up Okta SSO

This guide walks you through setting up Okta SSO for your Scytale account. The process uses a guided setup wizard - most of it happens directly in the wizard, with a few steps completed in your Okta admin console.

💡You will need Okta admin access to complete this setup. If you don't have it, loop in the relevant person from your IT or identity team before starting.

Before you begin

To get started, contact Scytale Support to request SSO setup for your account. Support will prepare your configuration and send you a unique SSO setup link to begin. Once you have your link, follow the steps below.

Step 1 - Open your SSO setup link

Open the SSO setup link sent to you by Scytale Support. This opens the SSO Setup Suite - a guided wizard that walks you through the full configuration.

On the welcome screen you will see three sections: SSO Configuration, SCIM Configuration, and JIT Configuration. Click + Add under SSO Configuration to begin.

Step 2 - Select Okta as your identity provider

On the Identity Provider (IdP) Selection screen, select OKTA.

Follow the on-screen instructions through the wizard. The setup suite is self-guided - continue through each screen until you reach the User Attribute Mapping step.

Step 3 - Configure attribute mapping in Okta

This step requires matching configuration on both the setup wizard side and in your Okta admin console. The attribute names must be identical on both sides.

1. .In the SSO Setup Suite, navigate to the User Attribute Mapping screen and configure the values as shown below.

OKTA attribute name

Maps to

name

Display Name

email

Email

jobTitle

JobTitle

2. In your Okta admin console, open the SAML application and scroll down to Attribute Statements. Click Add expression and add the following three entries exactly as shown:

Name

Expression

email

user.profile.email

jobTitle

user.profile.title

name

user.profile.firstName + ' ' + user.profile.lastName

The attribute names in Okta must match the values in the setup wizard exactly, including capitalisation. A mismatch will prevent users from logging in.

3. When the wizard presents the Group Attribute Mapping screen, skip this step - this is not required even if you plan to assign groups.


​

Step 4 - Assign users and add your SSO domain

  1. In Okta, assign at least one user or group to the SAML application so that the connection can be tested.
    ​

  2. Add your organisation's SSO domain to the application in Okta (for example, yourcompany.com). This must match the domain associated with your users' email addresses.
    ​

  3. Save the configuration and run a test login to confirm the connection is working before activating SSO for all users.

Step 5 - Activate SSO on your account

Once your Okta configuration is complete and tested, you need to let Scytale know so SSO can be activated on your account.

To do this, either notify your Scytale GRC manager or contact Scytale Support, and include your SSO domain (e.g. yourcompany.com) so they can complete the activation.

Once activated, your users will be able to log in to Scytale using their Okta credentials.

That's it - once Scytale has enabled SSO on your account, your Okta login is live.

Related Articles
Did this answer your question?