For the complete documentation index, see llms.txt
For the complete documentation index, see llms.txt

How to Use Okta to Log In to Zinc

## Create an application within Okta 1. Sign into your company’s Okta account. 2. Make a note of your company’s **Okta domain**, which is in the format **https://.okta.com**. This can be found in the address field of your browser when you log into your Okta account e.g. https://zinc-1234.okta.com. Please note the admin dashboard of your Okta account will have a different domain, with **admin** included in the domain. Do not use your admin account domain. 3. Navigate to the **Admin** dashboard of your Okta account, and then to **Applications** **Applications**. 4. Click **Create App Integration**. 5. Select **OIDC - OpenID Connect** as the Sign-in method and **Web application** as the Application type. 6. Name the application e.g. ZINC-OIDC and leave the **Grant type** options as the default, with only **Authorization Code** selected. ![okta-sso-integration-1](https://storage.googleapis.com/public-fini-assets/zincwork_hc_images/okta-sso-integration-1.png) 7. For **Sign-in redirect URIs** add: https://auth.zincwork.com/login/callback 8. For **Sign-out redirect URIs** add: https://app.zincwork.com/ 9. For **Initiate login URI** add: https://app.zincwork.com/sign-in 10. For **Assignments** **Controlled access**, select **Skip group assignment** for now. 11. Click **Save**. 12. Make a note of your **Client ID** and **Client Secret**. You’ll need to add these within Zinc together with your **Okta domain**. ## Create a test user in Okta 1. Within the Okta admin dashboard, navigate to **Directory** **People** and click **Add Person**. 2. Add their name and email, click **Save**, and then click on the test user you’ve just created. 3. Click on **Assign application**, and select the Okta application you’ve created. Make sure you click **Assign** at the end of the row, not the application name. ![okta-sso-integration-2](https://storage.googleapis.com/public-fini-assets/zincwork_hc_images/okta-sso-integration-2.png) ## Add your Okta credentials to Zinc 1. Sign into your Zinc account and navigate to your company admin page: https://app.zincwork.com/company/general 2. Within **Enterprise Single Sign On** click **Start now**. ![okta-sso-integration-3](https://storage.googleapis.com/public-fini-assets/zincwork_hc_images/okta-sso-integration-3.png) 3. Select **Okta** as your **Integration**, and add your **Okta domain** within **Domain**. ![okta-sso-integration-4](https://storage.googleapis.com/public-fini-assets/zincwork_hc_images/okta-sso-integration-4.png) The **Okta domain** is your company’s Okta URL and is in the format https://.okta.com. 4. Add the **Client ID** and the **Client Secret** from the Okta application you created. ![okta-sso-integration-5](https://storage.googleapis.com/public-fini-assets/zincwork_hc_images/okta-sso-integration-5.png) ![okta-sso-integration-6](https://storage.googleapis.com/public-fini-assets/zincwork_hc_images/okta-sso-integration-6.png) 5. Add the username and password of your test user. 6. In **Email domains** add the domains of the email addresses your users will use to sign into Zinc. Only include the domain of the emails, i.e. the part after the **@** sign, and separate each domain with a comma e.g. acme.zinc.com,acme.com,acme.net. 7. Click **Submit**. Zinc will complete the set-up of your integration within 24 hours. ## Assign Okta users to access Zinc 1. Navigate to the **Admin** dashboard of your Okta account, and then to **Assign** **Applications**. 2. Click **Assign Users to App**. 3. Under the **Applications** section, select the Zinc application you created in step 2. 4. Under the **People** section, select the users that you want to provide access to. ![okta-sso-integration-7](https://storage.googleapis.com/public-fini-assets/zincwork_hc_images/okta-sso-integration-7.png) 5. Click **Next**. 6. Review your assignments and click **Confirm Assignments**. Important: Only assigned users can access Zinc. Unassigned users will not able able to log in to Zinc and will receive an error.