Note |
---|
This integration with Okta is currently under development and is not available to customers yet. Please contact us to learn more. |
If your organization uses Okta to manage your employees access to tools and services, you can take advantage of Okta’s “Provisioning” feature to automatically maintain traveller profiles in Umbrella Faces for your users.
...
While it is possible to use any administrator, we do recommend creating a dedicated user account with access limited to the scope of the integration. (e.g. Company Administrator account with "Can Crate Create / Edit / Delete Traveller" rights)
...
- Under the Applications tab, navigate to the Umbrella Faces application.
Click on the "Sign On" General tab in the application.
Under the "
App Settings" section enter the Faces Base URL in the field.
This should be the address of where you login to Faces minus the "/login" portion. For example if you usually login at https://tenzing.umbrella.ch/faces/login you'll have to enter https://tenzing.umbrella.ch/faces
- Click on the “Provisioning” tab in the application. Under the “Settings” panel on the left side, click the “Integration” link. Then click
- Click the “Configure API Integration” button.
- Check "Enable API integration" checkbox
- Click the "Authenticate with Umbrella Faces" Button
- Okta will open a pop-up window, where you'll be able to sign-in to Umbrella Faces and authorize the connection
- Once you've authorized the access, save and go back to the provisioning tab
Under the “Settings” panel on the left side, click “To App” under the Settings panel on the left.
Click the "Edit" button at the top right. Check the “Enable” box next to “Create Users”, "Update User Attributes" and "Deactivate Users"
You should now be able to assign your Okta users to the Umbrella Faces application as needed, with their profiles automatically showing up as traveller profiles.
...
Known Issues / Troubleshooting
N/A - There are currently no known issues
Attribute Definitions
Known Issue / Limitation | Solution |
---|---|
Faces does not support deactivation of travellers | Whenever a profile is set to inactive, we will delete it on our end. |
Supported Data fields | The following standard SCIM fields are supported:
Additionally, we support custom attributes as defined in "Attribute Definitions" below. Please do not hesitate to reach out to us should you wish for further data fields to be made available |
Attribute Definitions
Company Shortname
Note |
---|
By default this attribute is mapped to 'EXAMPLE', you'll want to update this to reflect an actual company shortname, either statically or via a function or other data field. |
...