Okta integration
Partly. Okta can sign people in to Personal Academy over OIDC or SAML, and can create, update and deactivate users through the SCIM 2.0 Users endpoint. Both are included from the Basic plan. Okta itself has not been tested end to end, and SCIM lacks the discovery endpoints and Group changes some stock Okta apps expect, so plan a test before you rely on it.
See pricing (from $1 per active user)
Included from the Basic plan, $1 per active user per month.
At a glance
Configure Okta as a generic OIDC or SAML application and, for provisioning, as a SCIM 2.0 application pointed at the Personal Academy SCIM base URL with a bearer token.
| Status | Built, not yet verified |
|---|---|
| Included from | Basic plan (SSO and SCIM) |
| Authentication | OIDC or SAML 2.0 for sign-in; SCIM bearer token for provisioning |
| Data that flows | In: sign-in claims; SCIM user create, update and deactivate. Out: nothing |
| Not yet | An end-to-end Okta test; SCIM ServiceProviderConfig, Schemas, ResourceTypes, Bulk and Group PATCH; role mapping |
How to set it up
- Open SSO in the Personal Academy admin area and enter the OIDC or SAML details from your Okta application.
- Create a SCIM token in the Personal Academy admin area.
- Add a SCIM 2.0 application in Okta with the SCIM base URL and token, and enable user create, update and deactivate.
- Assign a test user in Okta and confirm the account appears in Personal Academy.
Highlights
- OIDC or SAML sign-in
- SCIM 2.0 user provisioning and deprovisioning
- Included from the lowest paid plan
Technical overview
Authentication:SAML 2.0 or OIDC; SCIM 2.0 bearer token
Setup Time:~20 minutes
Prerequisites:
- •An Okta administrator account.
- •The Basic plan or above.