Skip to main content

Setting Up JIT User Provisioning with Okta

Updated

What is User Provisioning with JIT?

With just-in-time user provisioning (JIT provisioning), you are able to create a Loopio user directly within the IDP, and their user account will be created in Loopio the first time they log in.

Prerequisites

Configuring JIT User Provisioning in Okta

  1. In Okta navigate to Applications > Applications and select Create App Integration
    Okta Create App Integration button indicated.png
  2. Select SAML 2.0 as the sign-in method and click Next
    SAML 2_0 selected.png
  3. Fill in the details for your application on the General Settings page and click Next
  4. Navigate to the Configure SAML page, then under ‘SAML Settings’ fill in the section with the values from the table below:
    Single sign-on URL https://LOOPIO_URL/sso_saml/module.php/saml/sp/saml2-acs.php/loopio-sp
    SP Entity ID loopio-sp
    Default RelayState https://LOOPIO_URL/home
    NameID Format Unspecified
    Application username Email
    Update application username on Create and update

     

    Note: Replace ‘LOOPIO_URL’ with the domain of your Loopio instance. Learn more: What is my Company's Loopio URL?

  5. Fill out the Feedback section and click Finish

Creating Attributes in the App

  1. Go to the Okta Profile Editor for the Loopio App you created
  2. Click on Add Attribute
    Add Attribute button on Profile Editor page.png
  3. Add the following Attribute Statements:
    Name Name format Value
    firstName Unspecified user.firstName
    lastName Unspecified user.lastName
    loopioAccess Unspecified appuser.loopioAccess
    loopioRole Unspecified appuser.loopioRole
  4. Click Next and Finish

Configuring a User

These steps are important for a user to successfully log in to their Loopio account through SAML. Their account access will depend on what is set here.

 

Tip: Please be advised that we assume that users have been added to Okta and that they have been assigned to the proper application.

  1. Go to the Okta Profile Editor
  2. For any User or Group who should have Loopio access, add the following Attributes
    Display name Variable name Description Data type Attribute required
    Loopio Access loopioAccess This user has access to the Loopio platform. boolean Yes
    Loopio Role loopioRole The assigned role of the user (must match roles in customer's Loopio platform). string Yes

Related to

Related articles