Introduction
When you integrate GetAccept with Okta, you can:
Control in Okta who has access to GetAccept.
Enable your users to be automatically signed in to GetAccept with their Okta user accounts.
Manage your accounts in one central location - the Okta portal.
Before setting up the integration it is good to understand:
Each entity in GetAccept requires a separate Application in Okta.
The normal login page to GetAccept will not be supported for SSO. To short-link directly to SSO login, please refer to the Login URL in the GetAccept SAML settings.
How To Setup SAML
Step 1: Create GetAccept user groups in Okta
From the Developer Console, hover over the Directory and then select Groups from the menu that appears.
Click Add Group and fill out a name for the GetAccept Administrator group, example GetAccept Administrators
Click Add Group again and now fill out a name for the GetAccept User group, for example, GetAccept Users.
Step 2: Add GetAccept to Okta Applications
From the Developer Console, switch to Classic UI, go to the Applications page, and click Add Application.
Click Create New App, select Web and SAML 2.0, and click Create.
Enter GetAccept as App name and you can optionally add the logo from below. Right-click the logo, save it to your desktop then select and upload it to the new application. Click Next when done.
Step 3: Setting up SAML settings in Okta
Login to GetAccept.
Go to Settings.
Select Integrations.
Look for Provisioning and SSO.
Click the Settings button on the SAML Authentication connector.
Copy the ACS URL from GetAccept,
ex. https://app.getaccept.com/auth/saml/abc123/acs
and paste this URL into Okta Single sign-on URL and Default RelayState.Copy the Entity ID from GetAccept,
ex. https://app.getaccept.com/auth/saml/abc123/metadata.xml
and paste this URL into Okta Audience URI (SP Entity ID).Change the setting Name ID format in Okta to EmailAddress. Click Next at the bottom of the form.
On the final screen, select I'm an Okta customer adding an internal app, and click the Finish button.
Step 4: Configure GetAccept SSO
Before you proceed with connecting SAML in GetAccept, we recommend opening a new app.getaccept.com session in incognito mode. You can use that tab to test the connection at the end of this guide, that way you can easily disconnect the SAML connector if you run into any error codes when testing.
Choose where to apply your SAML copnnection
GetAccept platfrom
This will apply the SAML connection to our Core App only.
API or integration
This will apply the SAML connection both on our external API, integrations and our Core App.
Enable SAML for all entities
If you have an organisation, meaning you have sub entities to this master entity and you choose to check this box. Then the connection will apply to the whole organisation.
After finishing creating the application in Okta, click the button View Setup Instructions in the yellow section.
Then copy and paste the information from the setup instructions page to the fields in the GetAccept SAML connector.
Insert the value of Identity Provider Issuer in the first field called Identity Provider Issuer URL / Entity ID.
Insert the value of Identity Provider Single Sign-On URL in the field called SSO Login Redirect URL / SAML 2.0 Endpoint.
Insert the full Base64 content of the X.509 Certificate including the begin/end tags and dashes.
Click Save in GetAccept to save the SAML integration settings.
Step 5: Assign Okta user groups to the GetAccept application
Go back to the Okta application GetAccept and select the Assignments tab.
Hover Assign and click Assign to Groups from the list.
Click the Assign button next to the GetAccept Administrators and GetAccept Users group.
Click Done to close the Assign window.
Add the users who should have access to the SSO application and GetAccept using the Directory in Okta.
Step 6: Test the GetAccept application
Make sure the users are added to GetAccept manually or configure SCIM to automatically sync users, roles, and teams from Okta to GetAccept.
Try out the SSO integration by going to My Apps in the top-right corner of Okta.
Click the GetAccept box to SSO login directly to GetAccept with the current authenticated user in Okta.
Need help?
We are here to help you if you get stuck at any step in setting up the integration.
Use the chat icon to the right to start a conversation with our support team or send an email to support@getaccept.com 🧡