Enhance user authentication in Coefficient by integrating with SSO providers like Okta, allowing IT teams to efficiently manage user access across the organization.
While many organizations rely on Google Workspace or Microsoft for authentication, Coefficient now supports authentication through Okta. This integration requires all users to log in via your Okta SSO provider before accessing Coefficient, ensuring enhanced security and streamlined user management.
*This feature is for Enterprise Plans Only*
Setting up Okta for Coefficient
Managing access to Coefficient
Granting access to Coefficient
Revoking access to Coefficient
Using Okta Group Rules to automate access management
Setting up Okta for Coefficient
ℹ️ NOTE: To use this feature, Your Okta Admin/Coefficient Admin must first set this up for your domain. If you are unsure who your Okta Admin is, please contact your IT team for assistance.
Okta configuration
1. From the Okta UI, click on Applications and "Create App Integration".
2. Before proceeding, you need to enable a few settings. Under the Sign-in method, select "OIDC - OpenID Connect," and for the Application Type, choose "Web Application." Click "Next" to proceed.
3. You will be taken to the General Settings page; enter "Coefficient" in the App Integration Name field, and make sure that the "Client acting on behalf of a user" has "Authorization Code" enabled. (This is the default option and should already be checked).
4. For "Sign-in Redirect URL" enter: https://app.coefficient.io/api/oidc/login_callback. And for "Logout Redirect" enter: "https://app.coefficient.io"
5. We highly recommend enabling "Limit access to selected groups" in the Controlled access options and creating a group for Coefficient users. (You can skip this step and return to it later)
|
6. Congratulations on successfully creating a Coefficient app in Okta! To continue with the configuration in Coefficient, please retrieve the Client ID, Client Secret, and Authentication URL from the General tab in Okta. |
ℹ️ NOTE: The Authentication URL can be found in the upper right corner of your Okta app. |
Coefficient Configuration
|
1. Open the Coefficient Sidebar and click Menu. |
2. Select “My Workspace”. |
3. The My Workspace page will open in a new tab. Click "Settings" at the bottom left corner. |
3. Click "Configure" next to the Enable SSO Authentication option.
4. Input the Client ID, Client Secret, and Authentication URL (See step 6 of the Okta configuration above). Save.
4. Next, you will be prompted to enable SSO. Please click "Yes, enable".
5. Keep the current window open and ensure you see the message confirming that Okta SSO has been successfully saved and configured for your domain.
6. To verify the setup, open a new incognito browser window and go to the Coefficient Workspace (https://app.coefficient.io). You should be prompted to sign in with Okta. Click the "Sign in with Okta" button and complete the login process.
7. A successful login confirms that you have successfully configured your Coefficient and Okta integration! Congratulations 🎉
| ℹ️ NOTE: Here is a screenshot of what your user(s) will see when OKTA is configured/enabled for your org. |
Managing Access to Coefficient
Granting access to Coefficient
To give a user in your organization access to Coefficient, assign them to the "Coefficient Users" group in Okta.
Revoking access to Coefficient
To revoke a user's access to Coefficient, simply remove them from the "Coefficient Users" group in Okta.
Using Okta Group Rules to Automate Access Management
Utilize Okta Group Rules to automate access management for Coefficient by establishing rules according to user group memberships and attributes.
ℹ️Example: Setting up a rule to give everyone in the "Data Science" group access to Coefficient.
FAQs for SSO with Okta
How can I access this feature?
This feature is currently supported for users on the Enterprise plan with Coefficient. Please have your Coefficient Admin reach out to support for assistance. (support@coefficient.io).
Can a user log out of Coefficient via Okta?
Users will not be able to log out of Coefficient via Okta. Users using the SSO with Okta will see a log-out option with the Coefficient add-on.
What should I do if I encounter an error?
If you encounter an error, it indicates a misconfiguration. To resolve this, return to Step 5 of the Coefficient configuration steps and disable the "Enable SSO Authentication" toggle to avoid being locked out of Coefficient. Then, contact our support team (support@coefficient.io) for further assistance.