Connecting Okta with Vistar

You can integrate Vistar and Okta to import your employees into vistar seamlessly and enable specific users to log in to vistar through Okta single sign-on.

Steps to create a connection:

1. Log in to your company's Okta account as an admin.

2. From the left-hand navigation panel, select Applications.

3. Select Create App Integration.

4. Choose API services and select Next.

5. Name the app integration and select Save.

6. Grant access to the following items:

   okta.appGrants.read

   okta.apps.read

   okta.groups.read

   okta.idps.read

   okta.policies.read

   okta.roles.read

   okta.users.read

7. Locate your Okta Client ID and Okta Domain.

8. Login to vistar and open the Integrations Page.

9. Search for Okta in the Available Tab and select Connect.

10. Paste your Okta Domain and Client ID into the appropriate fields and select Next.

11. A new pop-up modal will appear. Copy the URL from Step 5 (paste it somewhere safe).

12. Return to Okta and find your App Integration.

13. From the General tab, select Edit and choose Public Key / Private Key for Client authentication.

14. Under the Public Keys section, select Use a URL to fetch keys dynamically.

15. Paste the URL obtained from the pop-up modal back into the open Okta field and select Save.

16. Return to vistar and select Validate from the pop-up Modal.

If you would like to enable SSO for all or specific users, follow the below steps:

1. Install the vistar SAML App in Okta under Applications.
2. Configure Sign-on settings under the vistar application.
3. Add your User assignments for SSO Login via the Assignments section of the vistar SAML Okta App.
4. Connect the app on vistar.