Applies to

Smartsheet
  • Enterprise

Capabilities

Who can use this capability

  • System Admin

Advanced Okta setup for Premium connectors and additional supported Smartsheet roles

Who can use this?

Plans:

  • Enterprise

Permissions:

  • System Admin

Find out if this capability is included in Smartsheet Regions or Smartsheet Gov.

In addition to the default roles, the Okta integration supports Smartsheet Premium Connectors, which are listed below. Ensure these connectors are enabled for your plan before mapping and provisioning the Smartsheet roles through Okta. Contact your Customer Success Manager or Account Team to purchase and enable these features.

The Smartsheet Premium Connectors in the table below are omitted by default in the list of Attributes for the Smartsheet User Profile.

Smartsheet RolesMapping ValuesVariable Names (Preferred)
Smartsheet Jira UserJIRA_USERsmartsheetJiraUser
Smartsheet Jira AdminJIRA_ADMINsmartsheetJiraAdmin
Smartsheet Salesforce UserSALESFORCE_USERsmartsheetSalesforceUser
Smartsheet Salesforce AdminSALESFORCE_ADMINsmartsheetSalesforceAdmin

To add the Smartsheet Premium Connectors to your list of Attributes:

  1. In Okta, go to Directory > Profile Editor. 

    Brandfolder Image
    Profile editor on Okta Admin page
  2. Select the Smartsheet User profile created for this integration. 

    Brandfolder Image
    Smartsheet User profile
  3. Select Add Attribute.

    Brandfolder Image
    Add Attribute button
  4. For each field, refer to the Smartsheet Roles indicated in the table above. For example, for the Smartsheet Jira User role, use the following settings, making sure the spelling and capitalization are correct:
    • Display name: Smartsheet Jira User
    • Variable name: smartsheetJiraUser
    • External name: roles.^[type=='JIRA_USER'].value
    • External namespace: urn:ietf:params:scim:schemas:core:2.0:User
  5. Save your changes and add the other attributes. You don't need to change any of the other parameters.

    Brandfolder Image
    Add more attributes
  6. For each Smartsheet User Attribute, change the External name type. Notice how the type is denoted with a double equals sign. The External namespace will be the same for all attributes. Here's how the list of Attributes appears once you’ve added all four Smartsheet Premium Connector roles.

    Brandfolder Image
    All four Smartsheet Premium Connector roles are added
  7. Select Mappings > Okta User to Smartsheet mappings to update the mappings.
  8. For each Smartsheet Premium Connector role mapping, add an expression with the Smartsheet Premium Connector related value. Here are the expressions for all four Smartsheet Premium Connector roles. Make sure that the spelling is correct.
    • isMemberOfGroupName('Smartsheet US Jira User) ? 'JIRA_USER' : ''
    • isMemberOfGroupName('Smartsheet US Jira Admin) ? 'JIRA_ADMIN' : ''
    • isMemberOfGroupName('Smartsheet US Salesforce User) ? 'SALESFORCE_USER' : ''
    • isMemberOfGroupName('Smartsheet US Salesforce Admin') ? 'SALESFORCE_ADMIN' : ''

      Brandfolder Image
      Smartsheet Premium Connector roles mapping
  9. Preview the mappings for a user that assigned all of the roles. This example uses Group IDs to check Okta group membership.
  10. If the mappings look correct, apply the mapping changes and provision these Smartsheet Connector roles through Okta.