Okta SSO
Introduction#
Transform supports login with Okta Single-Sign-On and Provisioning. Both SP-intiated (logins directly from Okta application) and IDP-intiated logins (logins from Transform) are supported. Transform also supports Create Users, Update Users, Deactivate Users, and Import Users Provisioning Functionality.
Enabling Okta#
Requirements
- Active Transform and Okta instances
- Transform administrator
- Okta Administrator
- An Okta Administrator must add the Transform application from Okta's Integration Network directory.
Once Transform has been added as an application in Okta, find the "Setup Instructions" link that's provided in Okta in the "Sign On" Tab within the Transform application object. You can also access the instructions here as long as you are signed into your Okta Admin dashboard since some components of the configuration are tailored to your Okta details.
Visit Okta's documentation for more details on adding an application and provisioning a user for an application. For Provisioning configuration please see this guide.
Notes#
Currently, users changing their emails within their Okta user profile requires you to notify Transform of the change, until we offer provisioning support. If your users need to change their emails within Okta, please contact support@transformdata.io
Troubleshooting#
403 Error
If your users see this 403 error when they log into Okta, this means the Okta Admin must add them to the Transform app in Okta.
Lost Configuration Fields
If you enable Okta and then misplace your SAML Connection Name and Organization ID, remember these were sent to the email of the user that enabled Okta. If you cannot find this email please email support@transformdata.io.
