StrataWorx
Help centre

Company sign-in (SSO) and automatic provisioning

Connect Microsoft Entra ID, Okta, Google Workspace, OneLogin, Ping or JumpCloud.

Connections 6 minProOpen in StrataWorx
What it's forStaff sign in with their work account, and joiners and leavers are added and removed automatically.
Who it's forAdministrators and your IT team.

Step by step

  1. Step 1: Single sign-onYour IT team creates a SAML app using the Entity ID and Reply (ACS) URL shown on Business systems › Identity, sends the metadata URL to StrataWorx support, and staff then use Company login on the sign-in page.
  2. Step 2: Microsoft Entra ID provisioningIn the StrataWorx enterprise app: Provisioning › Automatic. Tenant URL is the SCIM base URL shown in StrataWorx; Secret token is a provisioning token you create there. Test connection, then assign users and groups.
  3. Step 3: Okta provisioningIn the StrataWorx app: General › enable SCIM provisioning. SCIM connector base URL is the SCIM base URL; unique identifier is userName (email); authentication is HTTP Header with the token. Enable Create, Update and Deactivate users.
  4. Step 4: Google Workspace, OneLogin, Ping, JumpCloudUse the same SCIM base URL and bearer token in each provider's SCIM settings.
  5. Step 5: RolesAssign people to the groups 'StrataWorx Admins', 'StrataWorx Managers' or 'StrataWorx Read-only'. Everyone else gets the default role you choose.
Tips
  • Removing someone from the app in your identity provider removes their StrataWorx access within minutes.

Previous and next follow the Connections section.