Skip to main content

Okta: Single sign-on (SSO)

R
Written by Riya Sebastian
Updated over 3 weeks ago

Make it easy for your end-users and agents to access Atomicwork by implementing Okta Single Sign-On (SSO). This allows users to sign in using their existing Okta credentials—either by going to your Atomicwork portal or by launching Atomicwork directly from their Okta dashboard.

You can choose how your users should access the platform:

  • Start from Atomicwork: Users go to yourcompany.atomicwork.com and are redirected to Okta to sign in.

  • Start from Okta: Users click the Atomicwork app in their Okta dashboard and are signed in automatically.

Step 1: Setup an Okta application

  • Go to Applications > Create an App integration in your Okta admin portal

  • Choose "SAML 2.0" as your sign-in method

  • Enter an app name ("Atomicwork" should do). The logo is optional, so feel free to skip uploading the Atomicwork logo and select "Do not display application icon to users"

Step 2: Configure SAML settings

  • Switch to your Atomicwork account to fetch SAML settings. Go to Settings > Security > Okta SSO to find "Single sign-on URL" and "Audience URI" links. Copy these links into your Okta app settings.

  • Switch back to Okta admin portal. Leave the "Default RelayState" as blank.

  • Choose "Email address" for "NameID format"

  • Choose "Email" as "Application user name" and "Update application username on" setting as "Create and update".

  • In the "Attribute Statements" section, please add

    • firstName

    • lastName

    • login

    • id

  • Click "Save" and mark this as an "internal app" in the "Feedback" section

  • Click "Finish" and copy the metadata URL. Paste it into the SAML metadata URL field in your Atomicwork account. Click "Connect".

Did this answer your question?