Skip to main content
This guide is for Okta administrators who add the Gumloop integration from the Okta Integration Network (OIN) and connect it to their Gumloop organization for OpenID Connect (OIDC) single sign-on.

​
Prerequisites

  • A Gumloop organization on an Enterprise plan, and the Admin organization role in it.
  • Admin access to your Okta org.
  • Each member’s Okta email must match their Gumloop email. Gumloop matches accounts by email.

​
Supported features

  • SP-initiated SSO. Members start from the Gumloop sign-in page.
  • Just-In-Time provisioning. A member with no Gumloop account gets one at their first sign-in, unless SCIM provisioning is on.
  • Cross App Access. Okta can connect Slack and Asana for your members inside Gumloop. See Cross App Access with Okta.
IdP-initiated SSO and Single Logout are not supported. Point Okta dashboard tiles at your Gumloop login page instead. For more information on the listed features, visit the Okta Glossary.

​
Configuration steps

​
In Okta

  1. In the Okta Admin Console, select Applications and Resources > Applications and press Browse App Catalog.
  2. Search for Gumloop and press Add Integration. Keep the default label and press Done.
  3. Open the Assignments tab and assign the people or groups who should sign in to Gumloop.
  4. Open the Sign On tab and copy the Client ID and the Client secret. Note your Okta domain as well, the hostname of your Okta org, such as acme.okta.com.

​
In Gumloop

  1. Go to gumloop.com/settings/organization/sso and press Set up OpenID Connect.
  2. Press Continue through the two steps that describe creating an app in Okta. The catalog integration already covers them.
  3. Under App credentials, enter the Okta domain, Client ID, and Client Secret from Okta, then press Save app. Gumloop verifies them with Okta before saving.
  4. Under Choose SSO domains, turn on each email domain that should sign in through Okta.
  5. Under Test sign-in, press Run test and sign in to Okta as yourself. The test must pass before you can continue.
  6. Review the Pre-flight checks, then press Activate Okta OIDC sign-in.
Members on the SSO domains sign in through Okta from their next full sign-in. The change can take up to five minutes to take effect. For the full reference, see Setting up OIDC.

​
SP-initiated SSO

  1. Go to your organization’s Gumloop login page, gumloop.com/signin/{your-slug}, or to gumloop.com/signin.
  2. Enter your work email and press Sign in with SSO.
  3. Sign in to Okta if asked.
You land on your Gumloop home page.

​
Troubleshoot

For anything else, contact support@gumloop.com.