Through the ContactMonkey and Okta integration, you can connect your employees seamlessly into ContactMonkey and allow users to securely log in to ContactMonkey through Okta Single Sign On (SSO). 

Getting started

• Before using the steps in this guide, you will need to provide the below information to a person in your organization with Okta Super Admin permissions
• Your Okta administrator will need ContactMonkey's region-specific Okta Sign-in redirect URIs. This is because ContactMonkey allows our customers to access our service from a variety of regions

• You and the Okta Admin will need to know if you want your whole organization to be able to use the Okta app or if you want to create a group so only select users will be able to use the application. Please visit Okta's documentation on how to Create A Group.

How it works

To integrate Okta SSO and ContactMonkey, your organization must already have a pre-existing ContactMonkey account. This means that the first ContactMonkey user will need to have full login credentials at first, but after Okta is configured, they will no longer have those. 

The Okta Administrator must add ContactMonkey to your Okta tenant before using it. This is a light lift and should take 10 minutes for a teammate who is familiar with Okta. 

Okta Admin: Configure Okta with OIDC connection to ContactMonkey

The following are steps for most organizations to integrate Okta with ContactMonkey.  For the most recent information, please visit Okta's information on creating an OIDC Web App in the Okta Admin Console.

1. Sign in to your Okta organization as a user with administrative privileges.
   
2. In the Admin Console, go to Applications > Applications.
   
3. Click Create App Integration.
   
   
4. Select OIDC - OpenID Connect as the Sign-in method on the Create a new app integration page.
   
5. Choose Web Application for the Application type.
   
6. Click Next.
7. Enter a name for your app integration. We suggest keeping it simple and easy to identify by using ContactMonkey OAuth.  If you have multiple regions, it may be prudent to add a name for the name (e.g. ContactMonkey EU OAuth) 
   Note: You do not need to edit the Grant fields.
   
8. In the Sign-in redirect URIs box, enter the callback URL specific to your ContactMonkey account region.
   
9. Remove any sign-out prefilled text.
10. Under Assignments, assign the users who need to use ContactMonkey. This can be everyone in your organization, or you can create a group and assign specific users.
11. [Optional] Create a group within Okta, so that only those that are in the group can sign in using Okta.  Okta documentation: Create A Group.
12. [Optional] Okta Admins can add our logo. Download it from our website.
    
13. Save your changes.
14. You will be brought to {Your App Name} App details page. Here you can find the Client ID and Client Secret. Copy those to send to the ContactMonkey team.

Okta Admin: Setting up Okta link to ContactMonkey's Dashboard  (Optional)

Although Okta sign-in can be used to sign in to the ContactMonkey Outlook AddIn, Okta administrators may also want to add a link to the ContactMonkey Dashboard to direct sign-ins.  Below are the recommended Bookmark App links Okta admins should consider using depending on the region in which data center they have chosen for us to host their ContactMonkey data.

Customers who want a copy of the ContactMonkey logo can choose a logo from our website.

Provide ContactMonkey with OIDC information to complete setup

Once complete, please provide our support team the following information so that we can complete the setup:

• Okta Login URL
  
  • Your Okta login URL is the URL any Okta user in your organization will use to log in to your Okta instance. How to find your Okta login URL.
• Okta Client ID
• Okta Client Secret
• Any domains you wish to be able to use ContactMonkey from the same Okta tenant as a comma-separated text list.
  • Example: contactmonkey.com, contactmonkey.ca, contact.monkey

If you have multiple domains in the same Okta tenant you wish to use Okta SSO & ContactMonkey, send those as a comma-separated list.

Our team will add these to our backend and confirm once complete.

Each customer user: Connect ContactMonkey and Okta

Once the above steps are complete, you must log out of your ContactMonkey account (if you're logged in) and re-login by clicking "Log in with SSO" and entering your email address.

This allows us to detect your Okta tenant and connect it.

Sign in to your ContactMonkey dashboard.

After the first login, we will store your email moving forward. This is cookie-based, so if you clear your cache, you must re-enter your email!

After you enter your email, you'll be pushed to the Okta login page and must log in with your Okta credentials for your first login only. 

Each customer user: Authorize ContactMonkey 

To authorize ContactMonkey to send through your email provider, all ContactMonkey users must sign into their provider within their ContactMonkey settings after signing in with Okta. This only needs to happen once.

To do so, follow these steps:

1. Sign in to your ContactMonkey dashboard.
2. Click on your icon in the top right-hand side, and select "Settings" from the drop-down that appears.
3. Click Integrations in the menu on the left.
4. Sign in to your email provider (Gsuite or Office 365)

Depending on your email provider, you will see either Gsuite Integration or Office 365 Integration:

Frequently Asked Questions

Questions or concerns? We're always happy to help. 🤝 Contact support@contactmonkey.com or use the yellow Help button.