Does Pickit support Okta?
Yes! Pickit supports integration with Okta using SAML 2.0, allowing organizations to use Okta as their identity provider for signing in to Pickit.
With an Okta connection, Okta handles user authentication and your organization's sign-in policies, such as multi-factor authentication (MFA). Pickit uses the information provided by Okta to identify the user and give them access to the appropriate Pickit account and content.
What is required?
Setting up an Okta connection requires configuration both in Okta and Pickit.
On your organization's side, you'll need an Okta Administrator who can create and configure a SAML application, manage its signing certificate, and assign the appropriate users or groups. You'll also need to determine which email domains and users should have access to Pickit.
Pickit will provide your IT team with the necessary connection details, such as the ACS URL and SP Entity ID. Your IT team will, in turn, provide Pickit with the required Okta configuration, including your Okta issuer, SSO URL, email domains, and public signing certificate.
NOTE! Pickit do not need access to your Okta administrator password, private key, API token, or OAuth client secret.
How are users and permissions managed?
Depending on your setup, users can be added to the appropriate Pickit account when they first sign in using SAML.
User roles and content permissions are still managed in Pickit. Assigning users or groups to the Okta application determines who can authenticate through Okta, but does not automatically give them Admin permissions or synchronize Okta group permissions with Pickit.
Want to connect Pickit to Okta?
The connection needs to be configured together with Pickit.
Contact your Pickit Account Manager to get started. They will help coordinate the setup with your IT team and provide the Pickit-specific configuration details needed for your environment.
Not sure who your Account Manager is? Reach out to support@pickit.com, and we'll help you get in touch with the right person.