This guide describes how to configure uStudio’s Okta application. This is an ideal solution if your identity provider is Okta. Manage users and groups with SAML and SCIM protocols. Experience uStudio Enterprise Podcast with single sign-on (SSO) via SAML. Perform create, read, update, and deactivate (CRUD) operations on users and groups via SCIM. These actions give you more flexibility in controlling your uStudio user base in real time.
Features
Check out our Okta User Guide that describes how to use these features below.
Assign Users - through Okta to uStudio Enterprise Podcast with automatic provisioning.
Assign Groups - through Okta to uStudio Enterprise Podcast. You’re now managing SAML groups. You will need to configure SAML with groupName assertion and to map these groups by setting the Company SSO Group Name to the name of the group in Okta as described here. These groups will be updated every time a user logins.
Push Profile Updates - through Okta to uStudio Enterprise Podcast. The first name, last name, and primary email can be changed.
Push User Deactivation - through Okta to uStudio Enterprise Podcast by unassignment. Users will no longer have access and their profile information and analytics will be retained.
Push User Reactivation - through Okta to uStudio Enterprise Podcast by assignment. Users will have access again and their analytics will continue to be tracked.
Push Groups - through Okta to uStudio Enterprise Podcast with automatic provisioning via Push Groups. You're now managing SCIM groups. These groups will be updated in real time.
Prerequisites
Please contact support@ustudio.com to establish a service account and receive your Company Code, TOKEN, ACCOUNT-UID, and CONNECTION-UID.
Okta SCIM requires a license to Okta Lifecycle Management.
Configuration
General Settings
- Log into Okta as an administrator.
- Go to Applications and click Create App Integration.
- Select SAML 2.0 and click Next.
- In the General Settings, put "uStudio Audience Sandbox" or "uStudio Audience Production" as the App Name.
- Check “Do not display application icon to users.”
- Click Next.
Configure SAML
- Set https://ustudioinc.auth0.com/login/callback?connection=prod-companycode-podcast-sso as Single sign-on URL. Replace companycode with your company code value supplied by uStudio Support.
- Set urn:auth0:ustudioinc:prod-companycode-podcast-sso as Audience URI (SP Entity ID). Replace companycode with your company code value supplied by uStudio Support.
- Ensure Okta username is a unique id.
- Scroll down and click Next.
Feedback
- Check "This is an internal app that we have created"
- Click Finish.
Sign On
- Under the Sign On section, add the following 3 expressions by clicking Add expression.
- Expression for email set to user.profile.email.
- Expression for family_name set to user.profile.lastName.
- Expression for given_name set to user.profile.firstName.
- If you want to configure SAML groups, then expand the Show legacy configuration section.
- Click Edit.
- Under Group attribute statements, set groupName as Name with a filter set to Matches regex *. You may also specify certain groups if you don't want to include all groups.
- Click Save.
- Scroll up and provide uStudio Support (support@ustudio.com) with your Metadata URL or provide Sign on URL and Signing Certificate.
SCIM Settings
- Click on the General tab and then click Edit.
- Select SCIM under Provisioning and Save.
- Click on the Provisioning tab and then click Edit while in the Integration section.
- Set https://named-users.ustudio.com/api/v1/accounts/ACCOUNT-UID/connections/CONNECTION-UID as the SCIM connection base URL. Replace ACCOUNT-UID and CONNECTION-UID with your values supplied by uStudio Support.
- Set userName as Unique identifier field for users.
- Select Push New Users.
- Select Push Profile Updates.
- Select Push Groups.
- Set HTTP Header as Authentication Mode
- Set your USTUDIO_TOKEN in the Authorization bearer token field.
- Click "Test Connector Configuration"
- Click Save.
- Select the To App section.
- Click Edit.
- Select Enable on Create Users, Updates User Attributes, and Deactivate Users.
- Click Save.
Testing
Once you’re done configuring uStudio’s Okta application, please login into the admin and user applications to test out functionality. Then notify uStudio Support, so we can confirm that the SAML and SCIM connections are successfully established.
Admin Applications
UMC: https://podcast-admin.ustudio.com
User Applications
Mobile
- Download uStudio Enterprise Podcast from Google Play or Apple Store.
- Enter Company Code.
- Sign-in with your user credentials.
Web
Sign in with your user credentials at https://podcast-web.ustudio.com/COMPANYCODE.
Smart-link: https://COMPANYCODE.podcast-links.ustudio.com
Troubleshooting
userName - in Okta cannot be changed because it is bound to an account in uStudio. We recommend creating a new user if the person doesn't wish to use a certain email address as their userName. However, it is possible to change the first name, last name, and primary email address.
If you have any questions or concerns with our Okta integration, please contact support@ustudio.com.
