Syncing of Okta users will require additional configurations in your Okta app integration. The sync enables new users to be created automatically, and for Deprovisioned users in Okta to be deactivated in PraisePal.
Once the sync has been configured, the sync will happen once a day, between 0000 - 0600 hours, GMT+8.
Who can use this feature
👑 Available to Workspaces on the Enterprise Plan.
⚙️ Global Admin Permissions are required
Configure Okta app settings
Before proceeding, navigate to your PraisePal app integration in Okta.
Navigate to General Settings, and ensure that "Grant type" has both Authorization Code and Refresh Token checked. This will allow us to sync your users automatically on a daily basis.
The Refresh Token should also be configured to the "Use persistent token" setting.
We support syncing all users from your Okta instance, or syncing only a group. Depending on which type of sync you'd prefer, head to the appropriate section below:
Sync all users
Navigate to "Okta API Scopes". Within the granted API scopes, ensure that okta.users.read has been granted.
You should also ensure that within Okta, your individual user account has sufficient user permissions to read all users. Otherwise, PraisePal will only be able to access your individual data and not the data of all your users.
Sync users within a group
Navigate to "Okta API Scopes". Within the granted API scopes, ensure that okta.users.read and okta.groups.read has been granted.
You should also ensure that within Okta, your individual user account has sufficient user permissions to read users in groups. Otherwise, PraisePal will only be able to access your individual data and not the data of your users.
You're now done configuring your settings in Okta. Head to the PraisePal web application.
Activate PraisePal - Okta users sync
Within PraisePal, head to the Admin Settings -> Workspace -> Integrations tab.
If you have opted to sync only users within a group, indicate the Group ID within the relevant field.
Under Single Sign On, click on "Activate User Sync". This should direct you to your Okta log in interface.
Once authenticated with Okta, you should be redirected back to PraisePal's Integrations page, with a success message shown. This would mean that the sync has been successfully configured, and you should expect to see your Okta users created in PraisePal shortly.