Implement Okta Single Sign-On

This article explains how to implement Single Sign-On (SSO) from Okta into Cezanne HR using SAML 2.0.

Instructions for setting up the Okta SSO are also available from the Okta website.

Okta Configuration
  1. Log in to Okta with your Administrator account.
  2. Navigate to the Admin screen.
  3. Select Add Applications.
1. Okta Configuration
  1. Select Create New App.
  1. Select SAML 2.0.
  2. Click Create.
  1. On the General Settings tab:
    • Enter 'Cezanne HR SSO' as the App name.
    • Click Next.
  1. On the Configure SAML tab:
  1. On the Feedback tab:
    • Select I'm an Okta customer adding an internal app.
    • Click Finish.
  1. Remember in the Okta Cezanne Application to add all users that you wish to grant access to the app:
  1. In the Sign On section, select View Setup Instructions.
  1. Copy the Identity Provider Single Sign-On URL and Identity Provider Issuer as you will need them later:
Cezanne Configuration

Navigate: System Setup >> Security Settings >> Single Sign-On Configuration

  1. Tick the SAML 2.0 check box
  2. Select Advanced Configuration
2. Cezanne Configuration
  1. Click Add New.
  2. Enter a Display Name e.g. Okta
  3. Paste the 'Identity Provider Issuer' from the section above into the Entity Identifier field.
  4. Select 'POST' from the SAML Binding drop-down.
  5. Paste the 'Identity Provider Single Sign-On URL' from the section above into the Security Token Service Endpoint.
  6. Upload the Okta Certificate that you downloaded earlier into the Public Key Certificate field.
  7. Click Ok and Save
  1. Map the cezanne User to the Okta User using the mapping name they provided in the general setup of their application:

Associating Okta users with Cezanne users

There are two ways to associate your users' Okta identities with their Cezanne user accounts. You can use the User Settings screen to associate individual users or the SAML 2.0 Users Data Import to associate users in bulk.

Using the User Settings Screen

Navigate to: System Setup >> Manage Users >> User Settings.

  1. Search for the user you wish to update.
  2. Select the Single Sign-On tab.
  3. In the SAML 2.0 Identifiers section, click Add New.
  4. In the Identity Provider column select Okta and in the User Identifier column enter the user's Okta username.
  5. Click Save.
Associating Okta users with Cezanne users

Using the SAML 2.0 Users Data Import

Navigate to: System Setup >> Data Management >> Import Data.

  1. Select SAML 2.0 Users on the Settings tab.
  2. Follow the on-screen instructions. For information about data imports, please refer to the Data Importing Knowledge Base article.