Implementing ChartHop
...
Identity & SSO
Okta
the okta app automatically updates your okta profiles with charthop source data you can configure both okta profile fields and group memberships optionally, you can set the app to create okta profiles when people are added to charthop when you install okta, you'll need to make decisions about how you want to handle okta profiles, whether you set a default location, and what fields you want to include in your sync field description okta profiles automatically create new okta profiles from charthop on sync donβt create new profiles only update existing okta profiles on sync sync new hires before start date the number of days before a start date to begin syncing new hires obtain okta api credentials you will need to obtain api access from o kta before you can install the app to obtain an okta api key, follow the steps outlined in their help document https //support okta com/help/s/article/how do i create an api token?language=en us to connect okta to charthop, you must be an okta administrator once you've received the api token from okta, do not share this information with anyone outside of your organization install the okta app to install the okta app, follow the steps below from the left sidebar, select apps & bundles from the sub menu, select apps select the availible apps tab locate and select the okta app select install follow the steps outlined in the setup wizard to connect the okta app to charthop configure lifecycle & provisioning settings once the app is installed, you must configure how charthop handles new hires, re hires, and departures these settings determine when an okta profile is created and when access is revoked basic settings access these by selecting edit under the basic settings section of the okta app setting description create okta profiles for new hires when enabled, charthop automatically creates an okta record for any new person added to the platform re activate okta profiles for re hires when enabled, charthop identifies returning employees and re activates their existing (inactive) okta profile rather than creating a duplicate de activate okta profiles on departures automates the de activation of okta accounts based on the termination date in charthop de activate same day voluntary departures if checked, you can set a specific deactivation time (e g , 11 00 pm) this allows voluntary leavers to maintain access until the end of their final day send email and activate upon creation determines if the account is immediately activated or remains in a "staged" state note test this to ensure it aligns with your onboarding workflow automated de activation logic charthop performs a daily sync to manage departures based on the following rules past departures any employee terminated yesterday (voluntary or involuntary) who remains active in okta will be deactivated during the morning sync involuntary departures if event based sync is active, these users are typically deactivated immediately upon the termination being entered voluntary departures these users are deactivated once per day at the designated cutoff time (e g , 11 00 pm et) to ensure they have access for their full final shift run a single, on demand sync to okta any charthop user with sufficient permissions can trigger an on demand sync to okta at any time to sync your data for the first time, or subsequently, on demand at any time, follow the steps below from the left sidebar, select apps & bundles from the sub menu, select apps select the installed apps tab locate and select the okta app in the list of installed apps at the top of the page, select run one time sync select run sync to perform the sync export dry runs any charthop user with sufficient permissions can trigger a test integration between okta and charthop at any time from the left sidebar, select apps & bundles from the sub menu, select apps select the installed apps tab locate and select the okta app in the list of available apps at the top of the page, select run one time sync select export dry run to test the integration when the integration is complete, select download to recieve the test results file create sync groups you can create and populate okta groups from the app config page by following the steps below from the left sidebar, select apps & bundles from the sub menu, select apps select the installed apps tab locate and select the okta app in the list of available apps under the advanced settings section, select edit under the sync groups section, select + add group enter a name for the group in the group name field enter a corresponding carrot query in the include people matching field, or use the filter controls to the left select test to confirm your query it should open the data sheet in a new tab with your query applied select save at the bottom of the page create sync profile fields for each custom okta profile field, you may define a charthop field or expression to be synced to do this, follow the steps below from the left sidebar, select apps & bundles from the sub menu, select apps select the installed apps tab locate and select the okta app in the list of available apps under the advanced settings section, select edit under the sync profile fields section, select + add field enter the name of a custom okta profile field that you wish to populate with data enter the corresponding query or field that you wish to copy from charthop select save at the bottom of the page common expression examples use these common expressions to map charthop data to okta fields okta field name charthop expression description manageremail manager email pulls the primary email of the employee's direct manager deptcode department code syncs the short hand code for the department (e g , "eng" instead of "engineering") costcenter custom cost center pulls a custom field value defined in your charthop instance ismanager is manager a boolean (true/false) based on whether the person has direct reports supported attributes the following saml attributes are supported attribute name name format value org unspecified {org slug from charthop} email unspecified user email first name unspecified user firstname last name unspecified user lastname https //www charthop com/pricing/ hris hris | engagement | goals | performance | compensation reviews | compensation reviews | headcount planning
