Objective
The objective of this tutorial is to demonstrate setup with one test account on Humanity and Okta.
Overview
Access From your: Computer
Applies to: Manager
Humanity supports SSO with Okta giving you the benefits:
Mitigating risk for access to 3rd-party sites (user passwords not stored or managed externally)
Reducing password fatigue from the different user name and password combinations
Reducing time spent re-entering passwords for the same identity
Things to know before you begin:
To configure Okta SAML integration with Humanity, you need the following items:
A Humanity single-sign-on enabled subscription.
An Okta account.
You should have at least one user profile created on Okta in order to test this setup.
The scenario outlined in this tutorial consists of the following building blocks:
Enabling the Application Integration for Humanity
Step 1: Log in to your Okta account > Click 'Applications' as shown in Image 1
Image 1
Step 2: Click 'Add Applications' and as shown in Image 2
Image 2
Step 3: Type Humanity in the 'Search bar', Humanity Application will pop up, click 'Add' as shown in Image 3
Image 3
Step 4: The general settings page will open, copy the sub-domain and paste into 'Sub-domain' field on Okta side > Click 'Next' as shown in Image 4
Note: Sub-domain is the first part of the URL, in this case, it is 'samltest1', this varies from case to case.
Image 4
For more information about finding the Sub-Domain of your humanity account, go to 'SubDomain of your Humanity Account'
Step 5: The 'Sign-On options' page will open. Select 'SAML 2.0' as shown in Image 5
Image 5
Step 6: Scroll down to Credential Details > For the Application username format > Select 'Email' > Click'View Setup Instructions' Icon as shown in Image 6
Image 6
Once finished, a page with auto-generated information will open in a new browser tab.
Configuring SAML 2.0 for Humanity
Step 1: You may follow the steps to configure SAML 2.0 for Humanity as shown in Image 7
Image 7
Note: Main menu on Humanity is now horizontal, instead of left vertical.
When it is completely configured, Humanity SSO page will look like this:
Image 8
Step 2: Click 'Save Settings' icon as shown in Image 8. With this step, setting up of SSO on Humanity side is completed.
Step 3: Switch back to 'Okta' and click 'Done' icon on the bottom of Sign-On options page as shown in Image 9.
Image 9
After completing the configuration, it will redirect to Assignments page.
Assigning Okta Users to Humanity Application
Now, you would need to assign Okta users to this application in order to enable them for SSO login to Humanity.
Step 1: Click 'Assign' Icon, then Assign to People or Assign to Groups (depending on your organizational structure on Okta) as shown in Image 10.
Image 10
Note: In this tutorial, we will assign it to specific people, then a new popup window with a list of Okta users will open.
Step 2: Click 'Assign' for users you want to give an access to Humanity from Okta as shown in Image 11.
Image 11
Note: An option to set/change Okta User Name will show. It is important to keep the User Name in email format as Humanity SSO is using email to match user profiles between Identity Provider (like Okta) and Service Provider (like Humanity).
Step 3: Click 'Save and Go Back' as shown in Image 12. Repeat these steps for all users you want to assign to the Humanity Application.
Image 12
Step 4: Click 'Done' when you have finished assigning as shown in Image 13.
Image 13
Now, you would need to add corresponding users on Humanity.
Step 5: Go to Staff Module, click 'Add Employees' as shown in Image 14.
Image 14
Step 6: Enter their First Name, Last Name (optional) and Email address as Okta User Name into Email field > Click 'Save Employees' as shown in Image 15. You may also import employees by creating a.CSV file/.XLSX.
Image 15
For more information about importing .CSV/.XLSX file, go to Import Employees From a .csv/.xlsx file.
Note: After adding the employees, you will be prompted to assign them position/s which is an optional step. Also, to allow users to log in, their profiles must be
activated.
For more information about activating employees, go to Send Activation Emails / Manually Activate or Not Activated / Bulk Activation.
Testing SSO Login
Open the incognito tab or new browser and log-in to Okta as one of the users assigned to Humanity application. On the dashboard click on it as shown in Image 16.
Image 16
Once it's done, you will be redirected and logged in to Humanity as a user as shown in Image 17.
Image 17
Still Having Trouble?
If you are still having issues logging in using SSO with Okta, our troubleshooting article might help.
Related Articles
If you have any queries, please don't hesitate to reach us at support@humanity.com. Happy Scheduling!