Okta Single Sign-On (SSO) Setup Guide

The integration with Okta lets you use Okta as your single sign-on and multi-factor authentication service to access Kadence. This adds an extra layer of security for our customers.

For users to be able to log in to Kadence with their Okta account, user accounts need to be created in Kadence with the same email address as their Okta user.

This article covers:

• Prerequisites
• Supported Features
• Adding Kadence to Okta
• Getting the required information in Okta
• Integrate Okta with Kadence Cloud
• Troubleshooting and tips
• Logging into Kadence via Okta SSO

Prerequisites:

• You must have an Okta license
• You must have access to an Okta admin account
• You must be a global admin in Kadence

Supported Features:

• Identity Provider Initiated (IdP-initiated) SSO via Okta
• Service Provider Initiated (SP-initiated) SSO via Kadence

Adding Kadence to Okta

1. Sign in to your Okta organization as a user with administrative privileges.
2. Click on Admin.
3. Navigate to Applications > Applications using the top navigation, then click on Add Application.
4. Press the + Add Apps button in the top right.
5. Search for and select Kadence.
6. Press Add on the left hand side.

Getting the required information from Okta

You will need to take a note of a few pieces of information here. We recommend using a text editor which does not offer any formatting of text in order to store this information temporarily, e.g. Notepad.

To get the information you require from Okta to set up the SSO feature, do the following:

1. Sign in to your Okta organization as a user with administrative privileges.
2. Please locate and take a copy of your sign-in URL, E.g. If the url is https://kadence-sso.okta.com/app/UserHome?fromAdmin=true, then you'll just need to take a note of https://kadence-sso.okta.com. You'll need this later.
3. Click on Admin (you may be asked to enter your Okta verification passcode at this point).
4. Navigate to Applications > Applications using the top navigation menu, then click on your Kadence application.
5. Open the Sign on tab.
6. Under Settings > Sign on Methods > OpenID Connect take a note of the Client ID and  Client Secret. You'll need these later.
7. Enter a Kadence SSO Alias. This should be related to your company name containing only lower case letters and numbers, e.g. if your company is called "Bellyard Coffee", then "bellyard" or "bellyardcoffee" would be a good SSO Alias. Take note of your SSO alias as you will need this later.
8. Press Save.

Integrate Okta with Kadence Cloud

In this section you'll enter the information you gathered in Getting the Required Information in Okta.

To integrate Okta with Kadence, do the following:

1. Go to Kadence > Settings (in the lower left-hand corner) > Integrations > Single sign-on (SSO) > Okta > Set Up Single Sign-On.
2. Click Add Okta SSO Integration.
3. Within Okta settings:
   1. Copy your Client ID and Client Secret into the corresponding fields.
   2. Paste your Org URL in the Base URL field.
4. Within Kadence Settings:
   1. Under Kadence SSO Alias enter the Kadence SSO Alias you made earlier
5. Choose Create and Test Integration.

You will see a confirmation message at the top of your screen.

Troubleshooting and tips:

• User accounts on Kadence must use the same email address as for their corresponding Okta user in order to sign-in to Kadence using Okta.
• You can not set up an Okta SSO integration if you also have another SSO integration set up, such as OneLogin.
• The Kadence SSO alias must be unique to Kadence. If someone else has already used your first choice, you will need to edit it within your Okta app settings to make sure that it is unique.

Logging into Kadence via Okta SSO

You can manage your Single Sign-On (SSO) Integration yourself as long as you are a global admin in Kadence, otherwise please contact your global admin for assistance.

That's it! You are all ready to go.