Okta SSO

How to use our Okta SAML or OIDC integration for SSO.

Written By Toby Egbuna

Last updated 12 months ago

SAML

  1. In the Admin Console, go to Applications.

  2. Click Create App Integration.

  3. Select SAML 2.0 as the Sign-in method.

  4. Click Next.

  5. Provide the following information for the integration:

    • Application name: Chezie

    • Application logo:

Chezie logo for use in setting up your Okta SSO integration.

  1. Configure your application with the following details:

  1. Assign the application to all employees unless otherwise instructed by your People team.

  2. Click <> Preview the SAML Assertion to view the XML generated from the SAML settings that you provided. → Send this XML file to the Chezie team.

  3. Chezie does not support IDP-initiated SAML. Create a Bookmark application for Chezie using the logo above. Direct that Bookmark to:

    https://chezie.app/login/**companyname** (your login URL will be provided by the Chezie team)

  4. The Chezie team will reach out to ask you to test the login when the setup is complete on our side.

OIDC

Chezie integrates with Okta for SSO. The following describes the set up required for allowing SSO via Okta. Note: this is part of the company onboarding process. An IT admin will need to work with the

1. Log in to your Okta Admin dashboard to create a new integration.

Login to your admin dashboard at https://www.okta.com, visit the applications tab and click the Create App Integration button to start your Chezie integration.

  1. Choose your sign-in method and application type

    Choose the OIDC - OpenID Connect sign-in method. Then choose Web Application.

  1. Name your integration "Chezie ERG Portal"

    The Okta login screen will depend on your Okta account settings. You have the option to upload the Chezie logo, although the Okta login screen will depend on your Okta account settings.

Chezie logo for use in setting up your Okta SSO integration.

  1. Configure your grant type settings

    Under Client acting on behalf of user, make sure Implicit (hybrid) is checked.

  1. Enter your sign-in redirect URI.

    Example: https://chezie.app/login/companyname

  1. Select "Allow everyone in your organization to access" in your Controlled Access settings.

    This ensures that all employees at your company with an Okta account can create a Chezie account and interact with your ERGs.

  1. Click "Save" to confirm the Chezie integration.

  1. Contact the Chezie support team to share your Client ID and Client Secret.

    When you've completed steps 1-7, contact the Chezie support team (toby@chezie.co and jesse@chezie.co). We will need your Client ID and Client Secret to finish setting up your Okta SSO. You can share both using https://onetimesecret.com/.