This article explains how to set up single sign-on (SSO) using the Collage integration with Okta. Our Okta integration allows admins to connect Collage to Okta and have employees sign in with their Okta credentials.
Supported Features
IdP-initiated authentication (SSO) flow: this flow occurs when a user clicks on the Collage HR button in the Okta dashboard. (IdP = Identity Provider, i.e., Okta.)
SP-initiated authentication flow: this flow occurs when a user navigates to a Collage HR login page that has been setup for your company. (SP = Service Provider, i.e., Collage.)
For more information about these flows, visit the Okta Glossary.
Prerequisites
Before proceeding with adding Okta to Collage, please make sure that you:
Have an Okta tenant,
Are an administrator in that tenant, and
Are a superadmin on Collage.
You will also need to make sure that all users in your company have their login emails match their Okta emails.
Step 1: Finding your Company Identifier
Sign into Collage as a superadmin.
Navigate to Company Settings -> Integrations -> Okta.
Your Company Identifier can be found under Step 1.
Step 2: Adding Collage to Okta
Add the Collage integration to your Okta tenant by following these steps:
Sign into your organization's Okta tenant.
Navigate to Applications -> Applications and click on Browse App Catalog.
Search for "Collage HR" and select the Collage HR app.
Click the Add Integration button.
If prompted, enter the Company Identifier found in Step 1.
After the installation is complete, click the Sign On tab in the Collage HR app.
Click Settings -> Edit.
8. Scroll down until you find the Company Identifier field, and paste the Company Identifier found in Step 1.
Collage has now been added to your organization's Okta tenant. To add users and groups to the Collage app for Okta, go to the Assignments tab.
Step 3: Adding Okta to Collage
Now that the Collage app for Okta has been added to your organization's Okta tenant, you can now enable Okta in Collage to allow your users to sign in using their Okta credentials.
To enable Okta for Collage:
In your organization's Okta tenant, go to the Sign On tab in the Collage app and find the Client ID and Client secret fields. Keep this page open in a separate window or tab, as these will be used later to add Okta to Collage.
While in Okta, find your Okta domain by clicking your user information in the top right. Copy your domain or keep this page open, as it will be used later.
Sign in to Collage, and go to Company Settings -> Integrations -> Okta.
On the Okta integration page in Collage, add your Okta domain, your client ID, and your Client secret fields.
Enable the Okta integration.
Once this is done, users will no longer be able to access Collage with a separate set of credentials, and will need to use Okta. Each user will receive an email with a unique link to link their Okta account to Collage. Read more about the end user experience in an SSO-enabled company here.
Your users can login into Collage by clicking on the Collage HR tile in their Okta dashboard. Alternatively, they can navigate to the Collage Okta Login URL directly. This URL can be found under Company Settings -> Integrations -> Okta after SSO is enabled:
