Okta

Integration with Okta allows your company's employees to log into Planfix and other services using a single password (Single Sign-On). This enhances convenience, security, and simplifies user account management.

Supported features

• IdP-initiated SSO (Single Sign-On)
• SP-initiated SSO
• Just-In-Time (JIT) provisioning
• SP-initiated SLO
• SCIM provisioning

SCIM supported feature

• Create users
• Update users attributes
• Deactivate users
• Import users

Configuration steps

Steps in Planfix:

• Go to the Account management — Integrations — Single Sign-On section.
• Activate integration with Okta.

Steps in Okta:

• Open the Okta administration panel in a separate tab: https://www.okta.com/.
• Go to the Applications section.
• Click on the Browse App Catalog button.
• Search for "Planfix" in the catalog:
• Select the Planfix application and click Add.
• Complete the application setup by following the on-screen instructions, ensuring you specify your Planfix account domain.
  • Enter your Planfix account domain (e.g., your-account.planfix.com) in the designated field during setup.
  • This domain is essential for configuring the correct SAML and SCIM endpoints for your Planfix account.
• In the application settings, go to the Sign On tab.
• Copy the Metadata URL link.
• Paste the Metadata URL link into the corresponding field in the integration settings in Planfix.
• Save the integration settings in Planfix.

Now, on the Planfix login page, you will have the option to authorize through SSO. Ensure that users are granted access to the Planfix application in Okta. When a new user logs in for the first time in Planfix, their account will be automatically created through the JIT (Just-In-Time provisioning) mechanism.

SP-initiated SSO

To initiate SSO from Planfix, follow these steps:

• Go to the Planfix login page.
• Click on the Login with Okta button.
• You will be redirected to the Okta login page.
• Enter your Okta credentials and click Login.
• You will be redirected back to Planfix and logged in automatically.

Setting up SCIM Provisioning

Steps in Okta:

• Go to the settings of the Planfix application in Okta.
• Open the General — App Settings section.
• Enter edit mode and enable the Provisioning SCIM option.
• Go to the Provisioning section:
• Copy the SCIM URL and Bearer Token from the integration settings in Planfix.
• Paste them into the corresponding fields in Okta.
• Activate the necessary settings according to your requirements and save the changes.
• Perform a configuration check by clicking the Test Connector Configuration button, and click Save to complete the setup.
• Set up rules in the To App section according to your organization's requirements.
• Also, set up rules in the To Okta section if you need to add users from Planfix to Okta.

Supported SCIM attributes

The following SCIM attributes are supported for user provisioning from the schema urn:ietf:params:scim:schemas:core:2.0:User:

Attribute	Description
userName	Unique username of the user
name.familyName	User's family name
name.givenName	User's given name
name.middleName	User's middle name (if applicable)
emails	List of user's email addresses
phoneNumbers	List of user's phone numbers
active	User's active status (true/false)
preferredLanguage	User's preferred language
locale	User's locale
timezone	User's time zone

Go To

• Integrations