Sastrify is now included in the Okta integration catalog. Pro & Platinum customers using Okta can securely login to Sastrify directly from Okta, bypassing the Sastrify login page and password management. Streamlined access for greater convenience.


In this configuration guide, you will learn how to configure Okta single sign-on (SSO) login and authentication for accessing Sastrify.


IN THIS ARTICLE

To set up Okta SSO as your login method for Sastrify, follow this 4-step process:

  1. Select "Login with Okta" as your login method in your Sastrify platform.
  2. Create an application for Sastrify in your Okta account and generate your credentials: Client ID, Client Secret, and Issuer URL.
  3. Send the credentials to Sastrify.
  4. Create a bookmark in Okta. 


Each step is detailed in the following sections.

Step 1: Select the login method in Sastrify



  1. Go to Settings > User & Company Data and find Authentication Settings on the right.
  2. Click "Edit".
  3. Select "Login with Okta".
  4. Click "Enable SSO".


After clicking "Enable SSO", you'll receive a confirmation that your SSO enablement request has been sent to the Sastrify App Support team. This will trigger an email prompting you to submit the required information (Step 3) to complete the configuration.


Now that Step 1 is done, let’s move to Step 2 to generate the required credentials from your Okta account.

Step 2: Create an app in Okta and generate credentials


First, you will need to create an app for Sastrify within your Okta account. To do this,

  1. Sign in to your Okta organization using your admin account.
  2. In the admin console, go to Applications > Applications.
  3. Click Create App Integration.
  4. Select the sign-in method type "OIDC - Open ID Connect" and the application type "Web Application".
  5. Make sure you enter the following callback URL https://login.sastrify.com/login/callback as the sign-in indirect URL



After successfully creating the app integration in your org, search for it in the Applications page. 

  1. Click App Integration to open the settings page.
  2. On the General tab, the Client Credentials section shows the client ID and client secret value for your app integration. Copy to Clipboard button beside each text field.


  3. For the Issuer URL, click your username in the upper right corner of the Admin Console. The domain will appear in the drop-down menu located directly below the username. 


By now you should have all the required credentials: Client ID, Client Secret and Issuer URL. 

Proceed to step 3 to send these credentials to our App Support team to complete the configuration process. 

Step 3: Send the credentials to Sastrify


Simply reply to the email from Step 1 with all the required credentials.


Once we receive them, our support team will enable the SSO login method within 2 business days. You’ll be notified via email once the configuration is complete.


Step 4: Create a bookmark in Okta


This last step can be done immediately after completing step 3. You don't need to wait for Sastrify's confirmation to start creating a bookmark. 


Creating a bookmark is also required if you want to log in to Sastrify directly from Okta.


1. Sign in to your Okta organization using your admin account.

2. In the admin console, go to Applications > Browse App Catalog.


3. In the Search field, enter Bookmark App. Click on the app integration called Bookmark App.


4. Click the "Add integration" to create a new Bookmark App.


5. In the General Settings for the Bookmark App, enter a label for the external application and the URL of the sign-in page for the app provided by Sastrify. Click Done to create the Bookmark App.


Please contact the support team through your Sastrify app if you would like to have this set up so we can send you the URL parameter needed to configure this.

Learn more about Sastrify App Support in this article.




6. As a final step, make sure that the users who should have access to Sastrify are assigned to this bookmark in Okta by clicking "Assign".



Step 5: How to log into Okta from Sastrify

1. Once Okta has been enabled, you and your team will receive an email to let you know of this change. Click on "Continue to log in":


2. You will be redirected to the Sastrify login page. Please enter your email as usual, click on "Continue" and you will be redirected to Okta from there:

Frequently Asked Questions


Q: What type of data does this feature retrieve and consume from my Okta account or environment?

A: The authentication setup process will retrieve and consume the following data from Okta:

User profile information: This includes user attributes such as name, email, user ID, and any other custom attributes you have configured in Okta.

Authentication information: Tokens such as the ID token, access token, and update token are exchanged during the authentication process.


Q: How are these tokens stored?

A: Tokens are securely cached in our identity management database infrastructure as they are typically used for session management and API access control. In addition to the relevant tokens, the authentication process also stores and maintains logs of authentication events, which may include timestamps, IP addresses, and other metadata for security and auditing purposes.


Q: How often is the API called?

A: Every 168 hours, i.e., every 7 days


Q: Do you support SAML for Okta?

We currently do not support SAML for Okta. 


Q: Do you support IdP initiated flow for Okta?

The Okta SSO does not support IdP initiated flow. As a workaround, you can create a bookmark in Okta as explained in step 4.