Aligned

Plan: this feature is only accessible in the Enterprise Plan

This guide outlines the steps to successfully set up a new Okta SSO connection for Aligned. If you encounter any issues or require further assistance, please reach out to Aligned support at <a href="mailto:support@alignedup.com" target="_blank" rel="nofollow noopener noreferrer">support@alignedup.com</a> or message us via chat.

You can set up Okta using one of the following connection types: SAML Connection or Okta Workforce (OIDC). After completing the setup, please share the required credentials with Aligned support to complete the integration.

___________________________________________________________

Sign in to your Okta admin dashboard using your administrator account.

Navigate to: Applications → Applications.

Click Create App Integration and select SAML 2.0 as the sign-in method.

Provide a name for the app and upload the Aligned logo if desired. Click Next.

- Single sign on URL:
 <code>https://auth.teamaligned.com/login/callback?connection=&lt;company_lower_case_name_without_spaces&gt;</code>
- Audience URI (SP Entity ID):
 <code>urn:auth0:alignedup</code>

In the Attribute Statements (Optional) section, add:

- <code>email</code> → <code>user.email</code>
- <code>name</code> → <code>${user.firstName} ${user.lastName}</code>

Click Next, select I'm an Okta customer adding an internal app, and click Finish.

Under SAML 2.0, copy the Sign On URL and Sign Out URL.

Scroll to the SAML Signing Certificates section and click Generate new certificate.

1. Sign in to your Okta admin dashboard using your administrator account.
2. Navigate to: Applications → Applications.
3. Click Create App Integration and select SAML 2.0 as the sign-in method.
 
 
4. Provide a name for the app and upload the Aligned logo if desired. Click Next.
5. Fill in the following fields:
 - Single sign on URL:
 <code>https://auth.teamaligned.com/login/callback?connection=&lt;company_lower_case_name_without_spaces&gt;</code>
 - Audience URI (SP Entity ID):
 <code>urn:auth0:alignedup</code>
6. In the Attribute Statements (Optional) section, add:
 - <code>email</code> → <code>user.email</code>
 - <code>name</code> → <code>${user.firstName} ${user.lastName}</code>
7. Click Next, select I'm an Okta customer adding an internal app, and click Finish.
8. Go to the Sign On tab.
9. Under SAML 2.0, copy the Sign On URL and Sign Out URL.
10. Scroll to the SAML Signing Certificates section and click Generate new certificate.
 
 
11. Download the certificate.

Send the following details to Aligned support:

The downloaded SAML certificate (active one)

- The downloaded SAML certificate (active one)
- Sign On URL
- Sign Out URL

In the Okta admin dashboard, go to: Applications → Applications.

Click Create App Integration, select:

- Sign-in method: OpenID Connect (OIDC)
- Application type: Web Application

Enter the application name (e.g. Aligned, without spaces) and upload the logo if desired.

- Sign-in redirect URIs:
 <code>https://auth.teamaligned.com/login/callback</code>

Set your Controlled access settings as needed.

1. In the Okta admin dashboard, go to: Applications → Applications.
2. Click Create App Integration, select:
 - Sign-in method: OpenID Connect (OIDC)
 - Application type: Web Application
3. Enter the application name (e.g. Aligned, without spaces) and upload the logo if desired.
4. Add the following:
 - Sign-in redirect URIs:
 <code>https://auth.teamaligned.com/login/callback</code>
5. Set your Controlled access settings as needed.
6. Click Save.

Copy the Client ID and Client Secret.

- Click your username in the upper-right corner of the Okta admin dashboard.
- Your domain will appear in the dropdown and should look like:
 - <code>example.okta.com</code>
 - <code>example.oktapreview.com</code>
 - <code>example.okta-emea.com</code>

1. Copy the Client ID and Client Secret.
2. Find your Okta domain:
 - Click your username in the upper-right corner of the Okta admin dashboard.
 - Your domain will appear in the dropdown and should look like:
 - <code>example.okta.com</code>
 - <code>example.oktapreview.com</code>
 - <code>example.okta-emea.com</code>

Enabling SSO by using Okta Connection

Setting up a SAML Connection

Send the following details to Aligned support:

Setting up Okta Workforce (OIDC)

Send the following details to Aligned support: