Okta- SSO setup with QuestionPro

Okta Identity Cloud is a cloud-based identity and access management (IAM) platform that helps organizations securely manage user authentication, authorization, and lifecycle management across applications, devices, and APIs. It provides solutions for workforce identity using Single Sign-On, Multi-factor Authentication, Lifecycle Management (Provisioning), and more.

Follow the steps below to connect Okta with QuestionPro using SAML 2.0:

• Login to your Okta account and create a new app by clicking on Create App Integration under Applications tab



• Select SAML 2.0 radio button, Click on Next

• Now Enter the name of your app and upload the Logo under General Settings of the app, then click on Next

• To get the Single Sign On URL go to your QuestionPro account>> User Profile Icon>> My Account>> SSO Authentication, You will see an the ACS URL which is a Single Sign On URL, Copy that URL for future use

• Now under Configure SAML, paste the ACS URL under Single Sign On and Audience URL (SP identity). Change the Name ID Format as “EmailAddress” and Application username as “Email”

Add an attribute with name “emailAddress” and select the value as “user.email” from the dropdown menu, Click on Next

• Select the first radio button (This is an internal app that we have created) under Feedback tab. Then click on Finish

• Now your app will be created and you will be able to see the Sign on tab, where you will find Metadata URL Copy URL

• Upload this Metadata URL on your QuestionPro account under My Account>>SSO Authentication,Select Metadata URL under Configuration Type, paste the URL here and Click on Save Changes

• Now your Okta account is connected with your QuestionPro account, Assign users to your app by clicking on “Assign to People” under Assignments tab in your Application.

• In the Assign to Users pop-up, click on the Assign button in front of the user’s name

• Edit the Username of the user and click on Save and Go Back

• When you click on the My Applications button you can see your app’s icon in the Okta dashboard, and when you click on the icon you will be redirected to your QuestionPro account, where you will just need to login into your Okta account.

Yes, It is possible to map new users to a specific Business Unit/ Team. You can pass an attribute named "teamName" in your SAML assertion containing the Business Unit Name / Team Name from your QuestionPro account which will add new users under that specific Business Unit/ Team. In the following example shown in the screenshot we have used the "Department" field of the user's profile to store the Team Name for the user which will be passed in the SAML assertion:

To get the Business Unit Name/ Team Name from your QuestionPro account, please follow the steps below:

• Go to User Profile >> Organization >> Teams
• Create a new team if required or copy the Team name of the existing Team("New Team SSO" in this case)

• You can use the Team Name in any field of the user profile under your Okta account. To access the user's profile in your Okta account go to People >> User >> Profile

• Here you can edit the user's profile.

Some of our employees are moved from the Research department to the Management department, how should we update their department in our QuestionPro account through our SSO connection?

• If there's is any change in the team/ department of the existing user then you can simply update the user's profile details at your IDP's side of the connection. Now whenever the user logs in to their QuestionPro account their team will be updated automatically.