LivePreso user provisioning with Okta (SCIM)

Owned by David Louis
Last updated: Oct 10, 2024
2 min read

If your organization uses Okta to manage your employees’ access to tools and services, you can take advantage of Okta’s “Provisioning” feature to automatically grant access to LivePreso

The integration between Okta and LivePreso that enables this provisioning to occur is built around an industry-standard protocol known as SCIM (System for Cross-domain Identity Management). To learn more about how Okta works with SCIM, please see this article.

This page will detail the setup process to link Okta with LivePreso

Features

The following features are currently supported

  • Push Users: Users in Okta that are assigned to the LivePreso application are automatically added as users in LivePreso

  • Update User Attributes: User attribute changes in Okta will be reflected in LivePreso

  • Deactivate Users: Users deactivated or unassigned from the LivePreso app will automatically be deactivated in LivePreso. This prevents this user from logging into LivePreso

  • Push Groups: Groups in Okta can be pushed to LivePreso. Linking okta groups to LivePreso license groups will allow you to assign and revoke licenses directly from Okta.

Requirements

The SCIM addon must be installed on your LivePreso instance to use the feature. Contact LivePreso support (support@livepreso.com) if you wish for this to be enabled. Additionally, if SSO/OIDC is required contact us with your app ID and secret key and we can set this up.

SSO Configuration Instructions

The LivePreso Okta integration allows logging into LivePreso using SP-initiated SSO flow. Configuration instructions can be found here: How do I use Okta to log in to LivePreso?

User Provisioning Step-by-Step Configuration Instructions

Install

  1. Inside Okta click Applications > Applications > Browse App Catalog

  2. Search for “LivePreso” and Add the integration

  3. Still in Okta navigate to the provisioning tab of the LivePreso app and click “Configure API Integration”

  4. Check Enable API Integration. You will see some configuration asking for a Base URL and API Token

  5. Log into your LivePreso HQ and navigate to the SCIM page. From here you can copy the base URL, and a token to paste back into Okta.

  6. Next on the Provisioning tab click “To App” and then click “Edit”

  7. Enable the following, then click save:
    - Create users
    - Update user attributes
    - Deactivate users

Setup Push Groups

If you wish for the integration to assign LivePreso licenses you can link new or existing Okta groups to our application groups. First find the LivePreso integration then

  1. Click the “Push Groups” tab

  2. Click “Refresh App Groups”

  3. Click “+Push Groups” and then “Find groups by name”.

  4. Search for the Okta group you wish to map to a “standard” LivePreso license user.

  5. On the Right select Link Group and select the LivePreso “Salesperson” group. It will give you a warning about a group rename - this is fine.

  6. (Optional) if you use Prep licenses repeat step 4 and 5 but when you Link Group select “Prep User”

  7. (Optional) If you want to manage HQ access via Okta repeat 4 and 5 and when you link group select “Manager”

  8. Go to the Okta group page for each group you linked and click the Applications tab, then click Assign application and assign the LivePreso application to it

If you add more users to the Okta group than you have licenses paid for in LivePreso the user will still appear in LivePreso HQ but will not be granted a license.

 

Troubleshooting and Tips

For any questions regarding SCIM you can contact our usual support channels (support@livepreso.com)