BlueTally lets you save time and headaches with our Single Sign-On integration with Okta that lets your team members log in and use the app without the need to manually create accounts and new passwords. Set up your integration in only a few steps:
1) Log in to your Okta account, click on Applications, then on Applications
2) Click on "Create App Integration"
3) Select "SAML 2.0"
4) Enter a name for the application (such as 'BlueTally SAML SSO'), upload our App Icon, and click "Next"
5) Enter
"https://app.bluetallyapp.com/users/auth/saml_SSOID/callback" in the Single sign on URL field,
"https://app.bluetallyapp.com/users/auth/saml_SSOID/metadata" in the Audience URI field,
"https://app.bluetallyapp.com/" in the Default RelayState, and scroll down
(replace SSOID with the SSO ID from your BlueTally account settings)
6) Change the Application Username to "Email" and scroll down
7) Add an attribute with the name "first_name" and value "user.firstName", another attribute with the name "last_name" and value "user.lastName", and scroll down
8) Click on "Next"
9) Select the first option, and scroll to the bottom of the page
10) Click on "Finish"
11) Download the SHA-2 certificate, and then click on the View SAML setup instructions button.
12) Copy the "Identity Provider Single Sign-On URL" and note it down for later.
13) Go to your BlueTally account Integrations page and click on the Single Sign-On section under Identity & Access. Then paste in the "Identity Provider Single Sign-On URL", upload the certificate, and decide on which role you'd like new users to have by default.
That's it! Once you upload these details into the SSO section of your Integrations page, we'll complete the setup on our end - this can take up to 24 hours. You'll receive an email when everything is ready.
Once SSO has been set up on your account, giving new users access to BlueTally will be done in the Okta application you just created. The same goes for removing user access. New users will only appear in the Account Users list in BlueTally after they've signed in for the first time.
To learn more about how this integration works, please refer to our knowledge base article.
If you have any questions regarding this integration, please don't hesitate to reach out to us, and we'll assist you with your setup!