Okta | Marketplace Partner
How does Okta integrate with BambooHR?
Purpose: To help you understand what you can use Okta for and how you can integrate it with BambooHR.
Okta
An overview from BambooHR® Marketplace:
Our IT products uniquely use identity information to grant people access to applications on any device at any time while still enforcing strong security protections. Our platform securely connects companies to their customers and partners. Today, thousands of organizations trust Okta to help them fulfill their missions as quickly as possible.
You can learn more about Okta in BambooHR® Marketplace.
Please note that Okta extends to the BambooHR mobile app so that users can log in to the app when using a single sign-on through Okta.
Please note you must be an admin user to set up this integration.
You can find step-by-step information on how to install this integration here.
What do I specifically need to copy for the X.509 Certificate?
You can find that information here. Be sure you are logged in as an Okta admin to generate the information.
In a separate window, log in to BambooHR. Navigate to Settings and select Apps. Find Okta and click Install.
Enter the SAML information into BambooHR by pasting the SSO Login URL (SAML 2.0 Endpoint (HTTP)) and the X.509 Certificate information from Okta.
You will also see the option to "allow optional email & password login." This will give employees the option to log in through [OneLogin/Microsoft/SAML/etc] or type in their email and password. Please note that while this is an option, we recommend leaving this unchecked as installing a single sign-on option will disable the 2-Step Login in BambooHR.
The option of making SSO an optional authentication choice while still allowing username/password authentication gives our customers who are primarily looking to simplify login experience more flexibility in how they configure and use the SSO integration. For customers whose requirements focus on enhanced security, it is recommended that they use the SSO-only option for maximum security. Authentication security will always only be as strong as the weakest option permitted.
Once logged into Okta, click on the BambooHR app icon to sign in to BambooHR immediately.
If you log out of BambooHR while still logged into Okta, you will still be effectively logged into BambooHR. If you were to go to your BambooHR login URL in a web browser, Okta would recognize you as still logged in and allow immediate access. BE SURE TO LOG OUT OF OKTA WHEN YOU ARE NO LONGER USING THE APPLICATION.
BambooHR supports Schema Discovery in Okta for you to add extra attributes to a user's profile. To do that, follow the instructions below:
- From the admin dashboard in Okta, click Directory and then select Profile Editor.
- Next to BambooHR, click Profile.
Check the list of attributes, and if you decide you need more, click Add Attribute. A list of extended attributes will appear (see below).
Select the attributes you would like to add and then click Save.
You can now import and push these user attribute values to or from BambooHR.
If you are an existing customer using this integration, please be aware that Okta supports this integration.
Click here to find contact information.