Overview
Okta is a company that provides identity and access management (IAM) services. Their platform is designed to help businesses securely manage and authenticate users, ensuring that the right individuals have the appropriate access to systems and data. Integrating Okta with the XMP allows you to:
enable users in the account to log in to the XMP using single sign-on (SSO) with their Okta credentials
create, update, and deactivate users in the hierarchy automatically as they are managed within the Okta software.
Prerequisites for Integrating with Okta
Before Okta credentials can be used for SSO or hierarchy updates with an Account in Experience.com, an administrator with access to the organization’s Okta business account must have Account Manager or Organization Manager access in the XMP.
To integrate Okta into the XMP, Experience.com must first be added and authorized as a service integration via the Okta application. The steps below walk through how to authorize Experience.com.
Click here to read more about adding an API Service Integration on the Okta help portal.
Log in to the Okta admin portal and navigate to the Applications page. On the Applications page, click Browse App Catalog.
In the search bar, search for and select Experience.com (OIDC).
On the Experience.com integration page, click the + Add Integration button in the top right corner.
Click the Done button to add the integration to your organization’s Okta account.
On the Assignments page, assign the users or user groups that should be able to use the Okta integration to sign into the Experience Management Platform.
Take note of the Client ID and Client Secret on the Sign-on tab of the integration. You will need these credentials to complete the integration setup process in the next step.
Configuring the Okta Integration in the XMP
Follow these steps to configure Okta for an Account and allow users to utilize the SSO option:
Create a new Okta Connection in the Account’s Integrations setup.
To create a new configuration, navigate to the Account Settings page and open the Integration Settings. Click Okta, and then click the blue New Connection button.
Enter a Domain name for the Okta credentials, then enter the Client ID and Client Secret and click the blue Connect button.
When redirected to the Okta sign-in page, enter your admin login credentials and sign in.
When your login credentials are accepted, the authorization of the integration should be complete and users with the assignment should be able to utilize the single sign-on process the next time they log in.
Log in to the XMP using Okta Credentials
This step-by-step walkthrough explains how users in enterprise accounts can log in to the XMP using their Okta credentials.
On the XMP login screen (https://app.experience.com/user/signin), click Login with Okta.
On the email validation page, enter the email associated with your Okta account. When your email is validated as an active user in the XMP, you will be redirected to the Okta login screen.
If your Okta profile is not assigned permissions for the Experience.com application in Okta, you may be unable to utilize the single sign-on option. You may need to speak with one of your organization’s Okta administrators.
Another reason that you may receive an error when attempting to validate your email for SSO is if you are not yet an existing member of an account’s hierarchy, or you have been deactivated. You may need to speak to your Organization or Account Manager.
Enter your Okta credentials to log in and click the blue Sign In button.
Once your Okta credentials are validated, you will be redirected back to your dashboard on the XMP.
Add Comment