If your organization uses Okta to manage your employees’ access to tools and services, you can take advantage of Okta’s “Provisioning” feature to automatically grant access to zkipster to your users, and even optionally synchronize membership in select Okta Groups with zkipster Teams.

The integration between Okta and zkispter that enables this provisioning to occur is built around an industry-standard protocol known as SCIM (System for Cross-domain Identity Management). To learn more about how Okta works with SCIM, please see this article.

The remainder of this guide is focused on enabling you to configure both zkipster and Okta to get provisioning up and running for your organization.

Features

The following provisioning features are supported by zkipster at present:

  • Push Users.(*1)(*2) Users in Okta that are assigned to the zkipster application in Okta are automatically added as members to your organization in zkipster.

  • Update user attributes.

  • Deactivate/reactivate users

  • Push Groups. Groups and their members in Okta can be pushed to zkispter (as zkispter teams and team members).

(*1) Pushing users is limited by the maximum number of account users defined in the subscribed plan in zkipster

(*2) the user phone attribute must follow the format <country_prefix> <telephone_number>

Requirements

SCIM is exclusively available in the zkipster Enterprise Plan. It is not available for Essentials or Professional users.

Step-by-step configuration instructions

Configure your Provisioning settings for zkipster as follows.

In zkipster

Login to your zkipster account and navigate to Account Settings, Integrations, API Access. You should see your zkipster account API Access configuration page.

Copy the value for API key. You'll need it when you configure Okta.

In Okta

Log in to your Okta admin portal and complete the following steps:

  1. Search and add the zkipster application if you don't have it instaled yet.

  2. From the application, click on the Provisioning tab and then click Configure API integration.

  3. Select Enable API integration and enter the following information:

    API Token: the API key you copied from your zkipster account.

  4. Select Test API Credentials. If the test passes, select Save.

  5. Select the To App under Settings.

  6. Select Edit and select Enable for the options you'd like to have.

  7. Select Save to apply the integration settings.

Assign People or Groups to the zkipster app

  1. Go to the Assignments tab.

  2. From the Assign drop-down menu, select Assign to People or Assign to Groups.

Enable “push groups” functionality

Groups and their members can be pushed to zkipster as teams and team members.

  1. To sync the group information with the zkipster service, go to the Push Groups tab.

  2. Click Push Groups > Find groups by name

  3. Search and select the groups to sync with the zkipster service, making sure to select Push group memberships immediately.

  4. Click Save to only add a single group or Save & Add Another if you wish to push multiple groups.

  5. Click Close.

  6. On the Push Groups page, verify that all of your groups have been added

Did this answer your question?