OIDC SSO - Okta Configuration

Set up single sign-on (SSO) for ContactMonkey using Okta with OpenID Connect (OIDC).

Looking for SAML 2.0? Click here.

Availability

Okta SSO integration is available on Enterprise plans only. Contact your Customer Success Manager for more information.

Prerequisites

Before you begin, ensure you have:

1. Okta Super Admin access or someone in your organization with these permissions
2. User access decision made: Will your entire organization use the Okta app, or only specific users in a group?
3. (Optional) Okta user group created if you want to restrict access to specific users. See Okta's documentation on creating groups.

Step 1: Configure Okta (Okta Administrator)

Create the OIDC App Integration

1. Sign in to your Okta organization as an administrator
2. Navigate to Applications → Applications
3. Click Create App Integration
4. Select OIDC - OpenID Connect as the sign-in method
5. Choose Web Application as the application type
6. Click Next

Configure App Settings

1. App name: Enter "ContactMonkey OAuth"
   • For regional accounts outside the US, use "ContactMonkey EU OAuth", "ContactMonkey CA OAuth", or "ContactMonkey AU OAuth"
2. Grant fields: Leave unchanged - do not edit these
3. Sign-in redirect URI: Enter the callback URL for your region:
   • US: https://contactmonkey.com/users/auth/oidc/callback
   • EU: https://contactmonkeyeu.com/users/auth/oidc/callback
   • Canada: https://contactmonkey.ca/users/auth/oidc/callback
   • Australia: https://contactmonkey.au/users/auth/oidc/callback
4. Sign-out redirect URIs: Remove any pre-filled text
5. Assignments: Choose who can access ContactMonkey:
   • Select Everyone to give your entire organization access, OR
   • Select Limit access to selected groups and choose your pre-created group
6. Click Save

Get Your Credentials

On the app details page, locate and copy:

• Client ID
• Client Secret

Keep these credentials ready to send to ContactMonkey Technical Support in Step 2.

Optional: Customize the Okta app by adding a logo or creating a dashboard bookmark with your region's direct sign-in link.

Step 2: Send Information to ContactMonkey

Email support@contactmonkey.com with the following information:

1. Okta Login URL - The URL your organization uses to access Okta
2. Client ID - From Step 1
3. Client Secret - From Step 1
4. All domains that should use this Okta tenant (comma-separated list)
   • Example: contactmonkey.com, contactmonkey.ca, contact.monkey

ContactMonkey Technical Support will configure your account and notify you when setup is complete.

Step 3: First Login (End User)

Once ContactMonkey confirms setup is complete:

1. Log out of ContactMonkey if you're currently logged in
2. Go to your ContactMonkey login page
3. Click Log in with SSO
4. Enter your email address and click Continue
5. Sign in with your Okta credentials when redirected

ContactMonkey stores your email in a cookie. If you clear your browser cache, you'll need to re-enter your email address.

Step 4: Authorize Email Provider (End User)

After signing in with Okta for the first time, each user must connect their email provider:

1. Click your name at the top right of the ContactMonkey dashboard
2. Click Integrations
3. Find and click your email provider integration:
   • Office 365 users: Office 365 Integration tile
   • Google Workspace users: GSuite Integration tile
4. Follow the prompts to authorize ContactMonkey

This authorization only needs to be completed once per user.

Frequently Asked Questions

Can we use Okta SSO with multiple domains?

Yes. Provide all domains as a comma-separated list when sending credentials to support@contactmonkey.com.

Example: contactmonkey.com, contactmonkey.ca, contact.monkey

Does Okta automatically add or remove users in ContactMonkey?

No. User provisioning and de-provisioning are currently manual processes:

• To remove a user: Contact your Customer Success Manager or ContactMonkey Technical Support
• To add a user: Invite them to your ContactMonkey organization through the dashboard

Users must be invited to your ContactMonkey organization before they can log in with SSO.

Can I switch from Google or Microsoft SSO to Okta?

Yes. Contact your Customer Success Manager to make the switch.

What happens to my password after enabling Okta SSO?

After your first Okta login, you'll use SSO for all future logins. Your original password-based credentials will no longer work.

What if I selected the wrong region during setup?

Reach out to the ContactMonkey Technical Support team, and they can help you reconfigure your integration with the correct region.