Sign in

Okta

Note: SSO/SAML is available in our 50-99 and 100+ seat plans.

Setup and configuration

To set up your Steady account with SSO/SAML and Okta, you'll need to take the following steps. Right now there is still a manual step on our end, so we'll need the link from the last step along with a heads-up that you would like to enable SSO/SAML with Okta for your account.

Once we confirm that everything works, we'll disable password authentication and magic link sign-in capability completely for your account.

Here are the steps:

  1. Log in to your Okta organization as a user with administrative privileges
  2. Click on the "Applications" menu
  3. Click on "Create App Integration" and select "SAML 2.0"
  4. For the App name, use "Steady"
  5. Optionally add our logo if you like, you can download it here.
  6. On the next screen, use https://app.steady.space/saml/consume for the "Single sign-on URL"
  7. For "Audience URI (SP Entity ID)" use https://app.steady.space/saml/metadata
  8. For "Name ID format" select "EmailAddress"

  9. For "Application username" select "Email"

  10. Click Next
  11. Select "I'm an Okta customer..." and "Finish"
  12. Under "Sign On", tab, copy the link for the "Metadata URL" as shown in the screenshot below and send it to us at support@support.steady.space (or within the support chat).
  13. Assign the relevant users under the "Assignments" tab

Test with Steady

  1. Once we've received your Metadata URL, we'll enable SSO authentication for your account. You'll need to have the email addresses of the users in Steady match the users you have enabled for the application in Okta.
  2. You can test the configuration at https://app.steady.spacesaml/sign_in.
  3. Once you've confirmed with us that the authentication is working as expected, we'll disable conventional login/password access for your account.

Provisioning users

Once you have the application setup in Okta, you can either add users to both Okta and Steady, or use SCIM provisioning.

SCIM provisioning

Here's how to set up SCIM Provisioning for your account:

  1. Under the "General" tab, select "Edit" in the "App Settings" section.
  2. Select "SCIM" from the "Provisioning" options and "Save"
  3. Under the "Provisioning" tab, click "Edit"
  4. Fill in the "SCIM connector base URL" with the "SCIM v2.0 Base URL" found in your Steady account settings.
  5. Enter "email" for the "Unique identifier field for users"
  6. Check "Import New Users and Profile Updates", "Push New Users", and "Push Profile Updates"
  7. For "Authentication Mode", select "HTTP Header"
  8. Fill in the Authorization field with the "SCIM Bearer Token" found in your Steady account settings.
  9. Test the connection with the "Test API Credentials" button
  10. Click "Save"

Once that's done, you'll able to assign and un-assign users to Steady from the Assignments tab. To see the users as they appear in Steady, visit the "Users" tab in your account settings in Steady.