Okta - Manual Configuration

These instructions detail how to set up the Okta integration manually, they should be used if the Crewmojo integration is not available from the Okta Applications page.

Create a custom application

1. Log into the admin version of your Okta account and navigate to the Applications page
2. Click the Create App Integration to start the process of creating the custom Crewmojo integration

3. Choose Sign-in method 'OIDC'

4. Choose Application type 'Web Application'
5. In the General Settings section:

   • Set the App integration name to 'Crewmojo'

   • Upload this logo
   • In Grant Type, ensure only Authorization Code is selected

6. Add the following Sign-in redirect URLs https://api.test.crewmojo.com/v1/sso/okta https://api.crewmojo.com/v1/sso/okta

7. Add the following Sign-out redirect URIs https://test.crewmojo.app https://crewmojo.app

8. Leave Base URIs blank

9. Choose your desired Controlled access. If you don't know select Allow everyone and untick Federation Broker Mode

10. Save the form

    

Post creation settings

Once you have saved the form you will see the saved application settings with more options that need changing

1. You may need to upload the logo again as it doesn't appear. Click the pencil and re-upload the logo from above
2. Copy and save the Client ID and Client Secret. They will need to be used later

3. In the General Settings click Edit on the right-hand top side

   • These settings will allow users to go straight into the Crewmojo app by clicking on the icon in the Okta dashboard.

   • Select 'Either Okta or App' from the Login initiated by

   • Update to match the following paying attention to the Initiate login URI. Use either of the following: https://api.test.crewmojo.com/v1/sso/okta/start (For test environment) https://api.crewmojo.com/v1/sso/okta/start (For production)

Enable the application in Crewmojo Company Settings

Follow the instructions for 'In your Crewmojo account' to add the Client ID and Secret into the Company Settings in the Crewmojo App and selecting Okta as the Single Sign-on method see here