SSO Login via Okta and Heatspring

1. Requirements

Admin access to an Okta org

2. Supported Features

Service Provider (SP)-Initiated Authentication (SSO) Flow - this authentication flow occurs when the user attempts to log in to the application from Heatspring.

User Federation, role management, etc. are not supported. Users and their Heatspring roles will still need to be managed from the Heatspring settings page.

3. Configuration Steps

1. In Okta, Go to Applications → Browse App Catalog, and search and add Heatspring.
    
2. Assign the users or groups that should be able to log into Heatspring.
    
3. Go to the Heatspring App → Sign On tab and note of the Client ID and Client Secret.
    
4. Contact support with the following information:

• Okta Domain (looks like acme.okta.com)
• Client ID
• Client Secret

    5. You will be provided with your Heatspring Account ID.

Enter this value in Okta Heatspring App → Sign On tab → Edit → Advanced Sign-On Settings → Account ID field.

4. Logging Into Heatspring Using Okta

Once the Otka SSO is setup, users of the Heatspring account can login as usual:

https://www.heatspring.com/users/sign_in

5. Notes

Once enabled, users can only log into the Heatspring account through Okta. Old passwords will no longer work for existing users.