How do I configure Okta Single Sign On (SSO)?
How to configure SSO for Method Grid using Okta.
Your Method Grid account must have a custom domain for SSO to work
Configuring SSO for Okta
Part 1 | Setting up in Okta
- Log in to your Auth0 account. Click ‘Applications’ in the main navigation and select ‘Applications’ from the dropdown
- Click the blue ‘Create Application’ button
- In the modal, give the application a name (we suggest Method Grid). Select the application type as ‘Regular Web Application’ and confirm by clicking the blue ‘Create’ button at the bottom
- Go to the ‘Settings’ tab. Copy and safely store your ‘Domain’, ‘Client ID’ and ‘Client Secret’, you will need these to complete the setup in Method Grid
- Scroll down to ‘Application URIs’. Enter the following fields (Note, do not use your custom domain URI)
- Application Login URI: https://app.methodgrid.com/sign-in
- Allowed Callback URLs: https://app.methodgrid.com/sso/okta
- Allowed Logout URLs: https://app.methodgrid.com/sign-in
- Allowed Web Origins: https://app.methodgrid.com
- Scroll back up and click on the ‘Connections’ tab. Configure here the groups of users that will be able to use this Application, depending on how you have configured Auth0
- Click the blue 'Save' button
Your Okta setup is now configured, proceed to Part 2 to complete the setup in Method Grid ...
Part 2 | Completing the Okta setup in Method Grid
- Go to ‘Account settings’
- Select tab ‘Security’ and click on ‘Configure’ for the Okta Single Sign-On
- Enter the ‘Client ID’, ‘Client Secret’ and ‘Issuer’ (use ‘Domain’ field with added “https://” at the beginning). Save changes
- Now when a team member signs into Method Grid using Okta, if validated by Okta, they will be added as member to your Method Grid account (if they are not one already) and logged in
Please note: If you remove a team member from Okta, they will still exist in your Method Grid account but they will not be able to log in with Okta. If they were already an existing member of your Method Grid account before you configured SSO, they will still be able to log in to Method Grid with their original log in details. If you wish for them to be inactive in Method Grid, please make sure you archive them. You can do this on the members page by clicking the 'Archive' (box file icon) associated with them (How do I manage members?)