Sign in

Okta

Setup and configuration

To set up your Steady workspace with SSO/SAML and Okta, you’ll need to take the following steps. Right now there is still a manual step on our end, so we’ll need the link from the last step along with a heads-up that you would like to enable SSO/SAML with Okta for your workspace.

Once we confirm that everything works, we’ll disable password authentication and magic link sign-in capability completely for your workspace.

Here are the steps:

  1. Log in to your Okta organization as a user with administrative privileges

  2. Click on the “Applications” menu

  3. Click on “Create App Integration” and select “SAML 2.0”

  4. For the App name, use “Steady”

  5. Optionally add our logo if you like, you can download it here.

  6. On the next screen, use https://app.steady.space/saml/consume for the “Single sign-on URL”

  7. For “Audience URI (SP Entity ID)” use https://app.steady.space/saml/metadata

  8. For “Name ID format” select “EmailAddress”

  9. For “Application username” select “Email”

  10. Click Next

  11. Select “I’m an Okta customer…” and “Finish”

  12. Under “Sign On”, tab, copy the link for the “Metadata URL” as shown in the screenshot below and send it to us at support@support.steady.space (or within the support chat).

  13. Assign the relevant users under the “Assignments” tab

Test with Steady

  1. Once we’ve received your Metadata URL, we’ll enable SSO authentication for your workspace. You’ll need to have the email addresses of the users in Steady match the users you have enabled for the application in Okta.
  2. You can test the configuration at https://app.steady.space/saml/sign_in.
  3. Once you’ve confirmed with us that the authentication is working as expected, we’ll disable conventional login/password access for your workspace.

Provisioning users

Once you have the application setup in Okta, you can either add users to both Okta and Steady, or use SCIM provisioning.

SCIM provisioning

Here’s how to set up SCIM Provisioning for your workspace:

  1. Under the “General” tab, select “Edit” in the “App Settings” section.
  2. Select “SCIM” from the “Provisioning” options and “Save”
  3. Under the “Provisioning” tab, click “Edit”
  4. Fill in the “SCIM connector base URL” with the “SCIM v2.0 Base URL” found in your Steady workspace settings.
  5. Enter “email” for the “Unique identifier field for users”
  6. Check “Import New Users and Profile Updates”, “Push New Users”, and “Push Profile Updates”
  7. For “Authentication Mode”, select “HTTP Header”
  8. Fill in the Authorization field with the “SCIM Bearer Token” found in your Steady workspace settings.
  9. Test the connection with the “Test API Credentials” button
  10. Click “Save”

Once that’s done, you’ll able to assign and un-assign users to Steady from the Assignments tab. To see the users as they appear in Steady, visit the “People” tab in your workspace settings in Steady.