This guide provides instructions on configuring OpenID Connect (OIDC) Single Sign-On (SSO) for Spacent.

Supported features

Spacent supports the following feature:

• SP-initiated SSO
• Just-In-Time (JIT) Provisioning

Prerequisites

• Ensure that you have an Okta admin role with permission to manage apps.
• Ensure that you have admin privileges in Spacent Management Tool and are able to edit your organization’s preferences.

Integrate the app in Okta

1. In the Admin Console, go to Applications and Resources > Applications (or Applications > Applications in Okta Classic Engine).
2. Click Browse App Catalog.
3. Search for and select the Spacent app.
4. Click Add Integration.
5. Click Next.
6. Select the desired user or group assignments.
7. Click Save.
8. On the Sign On tab, copy your Client ID, Client secret, and your Okta organization domain (for example, xyz.okta.com).

If you’re using Okta Identity Engine, the Sign On tab is called the Authentication tab.

Configure the integration in Spacent

1. Sign into the Spacent Management Tool.
2. Click Preferences, and click General.
3. Select Okta as Authentication type.
4. Enter your Okta organization domain (for example, xyz.okta.com) into the field Okta domain.
5. Enter your Client ID, and Client secret.
6. Add the domains of the email addresses your organization’s users will signing in to the Domains list.
7. Click Save.

Verify SP-initiated SSO

Go to https://app.spacent.com Enter the email address assigned to the Spacent app in Okta. The email address has to have one of the domains you added above to the list of domains in Spacent Management Tool. You’re redirected to the sign-in page for your organization. Enter your Okta credentials. You’re signed in to Spacent.