Skip to main content

Help Center

What can we help you with?

Setting up single sign-on (SSO) with Okta (Plus Only)

Alexander P.
  • Updated

Forecasts integration with Okta allows you to use Okta for user provisioning service when accessing Forecast. This means that your Forecast account will have an extra layer of security. In order to make use of the integration please make sure that your email in Forecast is the same as the one in Okta. Below the article will walk you through how to set up your Okta.

If you are looking for User provisioning with Okta, see Okta Integration: User Provisioning Setup.

This article includes:

Configuring Single Sign-on in Okta

To configure the Single sign-on in Okta.

  1. Go to the Profile section of Okta.

  2.  Go to Assign Applications
    okta1.png

  3. Under Assign Applications, Click Add Application
    okta2.png
  4. Click on Create New App
    okta3.png
  5. Select OpenID Connect and click Create.
    okta4.png
  6. Name the application Forecast and upload the picture located here: https://app.forecast.it/forecast_logo_okta.png
  7. Set Login redirec URIs to graphql.forecast.it/okta/oauth
    okta5.png
  8. Click Save.
  9. Edit General Settings and fill in the details as listed below.
    okta6.png
  10. Click Save.
  11. Copy the “Client ID” and “Client secret”. These are required in Forecast.
    okta7.png

This will finalize the process in Okta and you can now move on with configuring the SSO in Forecast.

Configuring Single Sign-on in Forecast

Once everything is configured in Okta you will then be able to proceed with configuring the SSO in Forecast. 

To configure the SSO in Forecast

  1. Click Admin in the top bar. 
  2. Select Integrations from the dropdown.
  3. Scroll to the SSO section of the page and click on Okta.
  4. Fill in your “Okta account URL”, “Application client-id” and “Application client secret”.
  5. Click Save to finalize the process.

The SSO is now set up on both platforms.

Assign users to single sign-on with Okta

Once the configuration is done you can begin assigning users to the single sign-on in Okta. 

To assign users to single sign-on in Okta

  1. In the Admin Console, go to Directory>People.
  2. Click Add Person.
  3. Select a user type in the User type list or accept the default.
  4. Complete these fields:
    • First name— Enter the user's first name.
    • Last name— Enter the user's last name.
    • Username— Enter the user's user name in email format.
    • Primary email— Enter the user's primary email if it's different from their username.
    • Secondary email— Optional. Enter a secondary email to allow the user to access information when their primary email is unavailable.
    • Groups— Optional. Enter the groups to which the user belongs.
    • Password— Select Set by user to allow the user to set their password, or select Set by admin and enter a password.
    • Send user activation now- Optional. This check box is available when Set by user is selected as the password option. Select this check box to send a user activation email to the user.
    • User must change password on first login— Optional. This check box is selected by default when you select Set by admin as the password option. Clear this check box if you do not want the user to change their password when they first sign in.
  1. Click Save or click Save and Add Another to add another user.

Once this is done and the emails of the users match on both platforms, the users will have to log into Forecast by using the Okta option on the Forecast log-in page.

Switching authentication types

If a user is not included in the Okta single sign-on they will still be able to log into Forecast with their regular email and password. 

Another thing to keep in mind is that if you decide to switch to a different SSO, it is necessary to contact Forecast support as we must first disable the integration to the previous SSO integration that you were using.

Related articles

Comments

0 comments

Article is closed for comments.