For the complete documentation index, see llms.txt. You can also append .md to any page URL to get its markdown version.
Skip to main content
For the complete documentation index, see llms.txt.

For the complete documentation index, see llms.txt

Set up Signicat Dashboard login with Okta

You can set up single sign-on (SSO) for the Signicat Dashboard using Okta as your external identity provider. This setup allows you to manage user authentication centrally in Okta while giving your team secure access to Signicat services.

Production accounts only

The external identity provider feature is only available for production accounts in the Signicat Dashboard.

When you configure Okta as an external identity provider, your team can use their existing Okta credentials to log in securely to the Signicat Dashboard, without having to set up new user profiles.

Prerequisites​

Before you begin the integration process, ensure you have the necessary permissions in Okta. You need an Okta user account with one of the following administrator roles:

  • Super Admin
  • Org Admin
  • Group Admin

To check your user permissions in Okta, follow these steps:

  1. Log in to your Okta Admin Console.
  2. Select Directory > People in the left menu.
  3. Select your user profile from the list.
  4. Select the Admin roles tab.

Confirm that you have one of the required roles before you proceed with the integration.

1. Create an Okta application​

First, you need to create a new OpenID Connect (OIDC) application in your Okta Admin Console to represent the Signicat Dashboard.

  1. Log in to your Okta Admin Console.
  2. Select Applications and Resources > Applications in the left sidebar menu.
  3. Click Create App Integration.
  4. In the Create app integration window, select the following options:
    • Sign-in method: OIDC - OpenID Connect
    • Application type: Web Application
  5. Click Next.
  6. Enter a clear name in the App integration name field (for example, Signicat Dashboard SSO).
  7. In the Client definition section, choose Use Okta-generated client ID.
  8. In the Sign-in redirect URIs field, add the Signicat Dashboard callback URL: https://login.signicat.com/idps/okta/response
    Post-logout redirect URL

    If your setup requires a post-logout Redirect URI, you can use https://dashboard.signicat.com/signout-callback-oidc.

  9. In the Assignments section, select the Okta user groups that require access to the Signicat Dashboard.
  10. Click Save to create the application.
  11. In the Applications > General tab, you find the Client ID and Client Secret. Copy these values and save them securely, as you will need them in a later step.

2. Prepare for role mapping​

Role mapping ensures that your team members automatically receive the correct permissions when they log in to the Signicat Dashboard for the first time.

Before contacting Signicat Support, you must decide which Okta groups should be mapped to which Signicat roles. For example, you might decide that users in your Okta-Admins group should be granted the OrganisationAdmin role in Signicat.

  • Available Signicat roles: To learn about the available roles and permissions in the Signicat Dashboard, visit the Managing roles and permissions documentation.
  • List your mappings: You must provide a list of these mappings to our support team. We recommend you start with a simple mapping of one Okta group to the OrganisationAdmin role.

3. Configure SSO in the Signicat Dashboard​

To complete the setup, you need to contact your onboarding manager or the Signicat support team by creating a support ticket in the Signicat Dashboard. Before creating the ticket, ensure that you are logged in to the production organisation where you want to enable SSO.

When you submit your ticket, please provide all of the following fields:

Secure credential sharing

Never send your client secret in plain text through support tickets or unencrypted email. Share the secret value using Signicat Secure Share, request a secure sharing link from your Signicat onboarding manager, or use your organisation's preferred secure sharing solution.

Once our support team receives your ticket, they will configure the integration on our end and notify you when it is ready for testing.

4. Log in with Okta SSO​

Once Signicat confirms the setup is complete, you can test the authentication flow to verify that Okta successfully handles single sign-on. To do this:

  1. Open a new private or incognito browser window.
  2. Navigate to the Signicat IDP Selector page at https://dashboard.signicat.com/login-idp-selector.
  3. Select Log in with Okta.

    External Identity Providers log in screen.

  4. Enter your work email address associated with your Okta domain, then click Log in.
  5. You will be redirected to your Okta login portal. Enter your credentials.
  6. Confirm that Okta successfully authenticates you and redirects you back to the Signicat Dashboard.

User management with the SCIM REST API​

You can edit the roles, permissions and profiles of your existing users after they have already onboarded to the Signicat Dashboard. To modify the configuration of existing users, you need to use the Signicat IAM SCIM API.

This REST API allows you to manage user identity and access programmatically across your platforms by performing the following operations:

  • Get user profiles and attributes.
  • Update users and their attributes (such as modifying roles for existing, onboarded users).
  • Deactivate users.
  • Lock and unlock user access.

To learn more about managing your existing users programmatically, see the Signicat IAM SCIM API reference documentation.