Okta

Overview

Okta is a Cloud Identity Provider that enables secure Single Sign-On (SSO) and automated user provisioning. The Learn Amp integration with Okta provides a seamless login experience and can automatically create, deactivate, reactivate, or update users in Learn Amp based on changes in your Okta directory.

By connecting Okta to Learn Amp, you centralise user management while ensuring consistent, secure access to your learning platform.

💡 Tip: SSO and User Provisioning are independent features—you can enable one or both depending on your needs.

Functionality Breakdown

The Okta integration offers two core capabilities that can be used together or independently:

Single Sign-On (SSO)

Employees sign into Learn Amp using their existing Okta credentials—no separate passwords to remember. Learn Amp uses OpenID Connect for secure authentication.

• Seamless one-click login via Okta

• Two-factor authentication support

• Real-time security reporting

• Centralised access control

👉 See: Okta Single Sign-On (SSO) for details and setup.

User Provisioning

Automatically manage user accounts in Learn Amp based on your Okta directory:

• Create new users when added to Okta

• Sync profile updates in real-time

• Deactivate users when removed from Okta

• Reactivate users when restored

Provisioning Methods:

👉 See: Okta User Provisioning for details and setup.

Pre-requisites

To set up the Okta integration, you'll need:

• Administrator access to your Okta account

• Administrator access to your Learn Amp account

• The Learn Amp team to enable the integration for your account (contact us to request this)

Role Requirements

The following Learn Amp roles can configure the Okta integration:

• Owner – Full access to all integration settings

• Admin – Full administrative access to integration settings

Quick Start

For SSO Only

1. From the sidebar, select Settings → Integrations → Okta

2. Follow the setup steps to connect your Okta app

3. Users can now sign in with their Okta credentials

👉 See: Okta Single Sign-On (SSO) for detailed setup.

For User Provisioning

1. Choose your provisioning method (SCIM recommended for new setups)

2. Configure the integration in both Okta and Learn Amp

3. Assign users to the Learn Amp app in Okta

👉 See: Okta User Provisioning for detailed setup.

FAQs

Q: Can I use just SSO without user provisioning?
Yes. SSO and User Provisioning are completely independent features. You can enable SSO alone—users just need to exist in Learn Amp first.

Q: Can I use provisioning without SSO?
Yes. You can enable provisioning to automatically manage user accounts while still allowing password-based login.

Q: Which users get synced to Learn Amp?
Only users who have been assigned the Learn Amp app in Okta will be synchronised.

Q: How quickly do changes sync?
With SCIM or webhooks configured, changes typically sync within minutes. Without real-time sync, the standard integration syncs daily at 3am GMT.

Q: What's the difference between standard Okta and SCIM?
Standard Okta uses OpenID Connect + webhooks. SCIM uses SAML + SCIM protocol. SCIM is the industry standard and recommended for new setups. See Okta User Provisioning for a detailed comparison.

Q: Will manual changes in Learn Amp be overwritten?
Yes. Any manual changes to provisioned user profiles will be overwritten by the next sync from Okta.

Troubleshooting

Related Articles

Okta Single Sign-On (SSO)

• Okta Single Sign-On (SSO) – SSO setup and configuration

Okta User Provisioning

• Okta User Provisioning – Overview of provisioning options

  • Okta SCIM Integration – SCIM setup guide (recommended)