Integration overview
Connecting Okta to Omni allows you to:- Authenticate users through Okta using SAML.
- Provision and deprovision users automatically with SCIM.
- Sync user profile data such as display name and department through attribute mappings.
Supported features
Omni supports the following Okta provisioning features:- Push users - Users in Okta that are assigned to the Omni application in Okta are automatically added as users in Omni.
- Update user attributes - When user attributes are updated in Okta, they will be updated in Omni.
- Remove/deactivate users - When users are removed or deactivated in Okta, their membership to your Omni organization will be revoked.
- Reactivate users - Reactivating a user will create a new user in Omni with a new external ID.
- Push groups - Groups and their members in Okta can be pushed to Omni as Omni groups and group members.
Limitations
Omni does not currently support the following Okta provisioning features:- Sync password
- Enhanced group push
Getting started
Follow these steps to get set up. You can complete SAML only, or add SCIM and attribute sync for a fully automated experience.| Step | Description | Link |
|---|---|---|
| 1 | Set up SAML SSO to let users sign in to Omni with their Okta credentials. | SAML setup → |
| 2 | Enable SCIM provisioning to automatically create, update, and deactivate users in Omni. | SCIM setup → |
| 3 | Sync user attributes like name, title, and department between Okta and Omni. | Sync attributes → |
Notes & troubleshooting
- Admin access required: You’ll need Okta admin permissions to configure SAML and SCIM.
- Test before rollout: Try SSO with a test user before enabling it organization-wide.
- Sync frequency: SCIM updates usually occur within a few minutes of changes in Okta.