Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Integration Summary

Okta is a Cloud Identity Provider which facilitates a secure and efficient Single Sign-on. We integrate with Okta to provide you with a seamless login experience. Our integration with Okta can also automatically create, deactivate, reactivate or update users in Learn Amp.

...

  • If your company already uses Okta, your employees can sign into the Learn Amp platform using their single sign-on details.

  • Security comes first. Okta provides real-time security reporting and two-factor authentication, keeping your users’ data safe and secure.

  • If provisioning is enabled, Learn Amp will create new users as well as update and deactivate existing ones automatically to reflect changes made in Okta.

...

Information that can be synced

...

It is possible to sync additional or different data points from Okta in to Learn Amp’s custom fields. Some of the common fields are listed below but custom fields created in Okta can also be mapped across with the correct configuration.

Expand
titleFields in Okta
  • city

  • displayname

  • login

  • emoloyeenumber

  • division

  • countrycode

  • manageremail

  • hasdirectreports

  • nickname

  • secondemail

  • managerid

  • joblevel

  • paygroup

  • startdate

...

Learn Amp connects to Okta using OpenID Connect. Okta updates Learn Amp via webhooks which you can configure within Okta.

Learn Amp makes 2 different API calls to Okta

...


Learn Amp uses Okta ID in its API calls to fetch a user’s details. Learn Amp does not display the Okta ID to end users in Learn Amp. Additionally, Learn Amp will fetch user details by looking up Email in Okta if we do have the Okta ID stored yet for the user.

...

User provisioning

Learn Amp performs a lookup using the the value of ‘email’ from Okta. If a matching user is not found in Learn Amp, Learn Amp creates the user and stores the Okta ID against this user for future logins.

...

Expand
titleCan I choose which group of users in Okta are synced with Learn Amp?

?Yes, once the integration with Learn Amp has been enabled and set up, you can assign an existing group or crate a new one and then add it to the Learn Amp application. Only users in groups assigned to the the Learn Amp application can be provisioned.

Expand
titleCan I create user accounts in Learn Amp without sending invitation emails?

Yes. When setting up the Okta integration you will have the option to withhold invitation emails. Invitation emails can be issued at any time from the Individuals page in Learn Amp.

...

Expand
titleHow does Learn Amp deactivate users with Okta integraion?

?? I think this removal from the OKTA group which can be automated based on status = Active. Richard Larcombe or Taylor Williams will confirm.

Expand
titleDoes the Okta integration sync team managers?

Typically within Learn Amp the manager is set by the users 'Primary Team' (the teams manager, becomes their manager). However for this integration, the 'Primary Team' manager will be overridden with the individuals manager within Okta. This means that teams will not have a manager, so you may wish to set these up as a sensible default if the manager field is missing within Okta.

...