Single Sign-On (SSO)

The Akuity Platform supports the following Single Sign-On (SSO) providers:

• Microsoft (Azure AD)
• Okta

note

SSO is available on Enterprise plan only. Please contact our Sales Team to access the feature.

Configuring SSO

note

The admin or owner role on the Organization is required to configure SSO.

To configure SSO for an Organization on the Akuity Platform:

1. Go to Organization > SSO.

   

2. Click Add Configuration.

Microsoft (Azure AD)

3. Register an application with the Microsoft identity platform with the following settings:

   • Set Redirect URI to https://auth.akuity.io/login/callback

4. Add the following Delegated Permissions to the registered application:

   • Users > User.Read
   • Directory > Directory.Read.All

5. Generate a client secret.

6. Populate the configuration details inside the form:

   • Client ID: Application (client) ID
   • Client Secret: Client Secret
   • Azure AD Domain: Your Azure AD domain name. You can find this on your Azure AD directory's overview page in the Microsoft Azure portal.
   • Domain Alias: Organization domain to match organization members (e.g. some-org.onmicrosoft.com).
   • Auto Add Member: Allow your organization members to join your organization with the member role automatically.

   

7. Test the connection.

Okta

3. Create an Okta OIDC Application.

   • In your Okta Admin Dashboard, Select Applications > Applications, and Create App Integration.
   • Select Create New App.
   • Choose OIDC as the Sign-in method and Web Application as Application Type.
   • Set Sign-in redirect URIs with https://auth.akuity.io/login/callback and select Create.
   • Copy your Client ID and Client Secret.

4. Populate the configuration details on the form.

   • Client ID: Okta OIDC Application Client ID
   • Client Secret: Okta OIDC Application Client Secret
   • Okta Domain: Your Okta domain.
   • Domain Alias: Organization domain to match email (e.g. some-org.com).
   • Auto Add Member: Allow your organization members to join your organization with the member role automatically.

   

5. Test the connection.