Skip to main content

SSO Configuration - Okta SAML

The steps needed to set up Click Maint login via SSO with Okta SAML

Single Sign On enables organizations to let employees use a single set of credentials to log in to multiple software applications. Below are the steps on how an Admin user can manage Click Maint as one of these applications.

Steps

Okta Set Up

  1. In your Okta Admin Console, select Applications and Resources, then Applications.

  2. Click the Create App Integration button.

  3. Select the Classic experience tab.

  4. For Sign-in method, select SAML 2.0, then click Next.

  5. On the Create SAML Integration page, enter a name in the App name field, for example Click Maint.

  6. Check the box for Do not display application icon to users, then click Next.

  7. In the Configure SAML step, enter https://app.clickmaint.com/api/sso/saml/acs in the Single sign-on URL field. Customers on the Canadian site use https://app.clickmaint.ca/api/sso/saml/acs.

  8. In the Audience URI (SP Entity ID) field, enter a unique ID, for example urn:clickmaint:saml. You will use this same value in Click Maint.

  9. Scroll to the bottom and click Next.

  10. In the Feedback step, click Finish.

Your new application opens on the Sign On tab. Copy these two values to use in Click Maint:

  1. Sign on URL: In the SAML 2.0 section, click More details to expand it, then copy the Sign on URL.

  2. Signing Certificate: In the same section, copy the Signing Certificate.

Set Up Okta in Click Maint

  1. Log in to Click Maint and select Admin Settings from the main menu.

  2. Select the SSO tab.

  3. In the SAML row, click Configure.

  4. In the Configure SAML window, paste the Sign on URL into the SSO URL field.

  5. In the Entity ID field, enter the Audience URI you used in Okta, for example urn:clickmaint:saml.

  6. Paste the Signing Certificate you copied from Okta.

  7. Click the Save button.

  8. Turn on the Enabled toggle in the SAML row.

Assign Users in Okta

  1. Return to Okta and open the application you created.

  2. Click the Assignments tab.

  3. Click Assign, then select individual people or any existing groups.

  4. Confirm your selection to add them to the application.

Add new SSO Users in Click Maint

  1. From the Admin Settings module and All Users tab, click on +User button to open the Invite User form.

  2. Enter the email address of the new SSO user.

  3. Select SSO authentication type from the dropdown.

  4. Enter the first name, last name, and entity role from the dropdown. All other details are optional.

  5. Click the Add User button.

Invitation emails aren't sent to users set up via SSO.

How to Migrate Existing User to SSO

  1. Connect with the Click Maint Support team for help. You can do so via the portal or email [email protected]. We'll assist you in setting up for existing users that need to move to SSO.

Removing an SSO User

Important to note, before you remove a user from your group (outside Click Maint), you must log in to Click Maint and mark them as Inactive.

  1. Log in and select Admin Settings from the main menu.

  2. Select the All Users tab.

  3. Click on the user's name to open the User's profile card.

  4. Click on the three dots icon in the top right.

  5. Select Inactive.

  6. In the Make User Inactive Window, hit the Make Inactive button to confirm.

Here's the SSO log in guide to share with all users once your configure Okta SAML.

Related Articles
Did this answer your question?