Applies to

Smartsheet
  • Enterprise

Capabilities

Who can use this capability

You must have Admin permissions in Okta to complete this configuration.

Activate the Smartsheet V2 app in Okta

To configure domain-level SAML single sign-on with Okta, you must first enable the Smartsheet V2 app.

Who can use this?

Plans:

  • Enterprise

Permissions:

You must have Admin permissions in Okta to complete this configuration.

Find out if this capability is included in Smartsheet Regions or Smartsheet Gov.

Before you continue

There are two Smartsheet apps in Okta. Here's the difference between them:

  • Smartsheet SCIM: Used for setting up Directory Integration with Okta and configuring plan-level SAML SSO through Okta.
  • Smartsheet V2: Used for setting up domain-level SAML configuration with Okta.

To activate the Smartsheet V2 app in Okta

  1. Access the Okta Admin console.
  2. Browse the App Catalog for the 'Smartsheet v2' application.
  3. Add the Smartsheet v2 integration to your Okta environment.
    • To get the metadata you must provide to Smartsheet, navigate to the Sign On tab in Smartsheet V2 app and locate the SAML Metadata link to access the information.
    • You can assign the Smartsheet V2 app to users or groups through the Assignments tab in the application settings.

Keep these things in mind

  • As Okta Admin, you can enable additional attributes under the User Attributes & Claims section. Learn more about attribute requirements for SAML SSO.
  • By default, the Smartsheet V2 application in Okta maps only the required attributes for email to allow for streamlined user identification and access management in Smartsheet.
  • Smartsheet V2 only supports SP-initiated Authentication. As a result, users start the sign-in process from Smartsheet’s end.
  • It's advisable to hide the application icon in Okta from users until full support for IdP-initiated authentication is confirmed. Learn more about how to hide an app in Okta.