Okta Integration | Jeli

Jeli Part of PagerDuty

Okta + Jeli Benefits

  • Organizational access control by allowing users to seamlessly sign in to the Jeli web app
  • Supports SP-initiated or IdP-initiated SSO to log users into Jeli
  • Backed by Auth0

Requirements

📘

Availability

Before adding the Okta | Jeli integration, you’ll need to create an account with Jeli to set up a license. Jeli is available with PagerDuty's Enterprise plan for Incident Management. Please visit the Jeli signup page to create an account, or contact our Sales Team to upgrade to an account plan with this feature.

To Configure the Integration

In Jeli

Admin permissions are required to manage Jeli Integrations.

In Okta

Admin or super admin privileges are required.

How it Works

  • Okta verifies a user's identity and grants them access to the Jeli web app, if authorized.

Integration Walkthrough

❗️

Enterprise SSO Provider Limitation

Only one enterprise connection can be enabled at a given time. If you’re switching to Okta from Entra ID, you will need to coordinate a time for the cutover with PagerDuty Support.

I. In Okta

  1. Sign in to your Okta admin panel.
  2. In the left navigation, select Applications Applications.
A screenshot of the Okta UI demonstrating which item to select, Applications --> Applications

Select "Applications"

  1. Click Browse App Catalog, search for and select Jeli.
A screenshot of the Okta UI demonstrating how to search and select the "Jeli" app

Search and select "Jeli"

  1. The overview page details how the Jeli app will interact with Okta and your systems, along with the app's required access and provisioning. Click Add Integration.
  2. You will be directed to a General Settings page. The default options are sufficient for most use cases. Click Done to finish adding the Okta | Jeli integration.

You can confirm that the app is integrated into your Okta organization by navigating to the Applications page, which should now contain an entry for Jeli.

II. Contact PagerDuty Support

❗️

Security Recommendation

When contacting the PagerDuty Support Team, please take care not to expose sensitive information in plain text over email. We recommend one of the following approaches:

  • Compose your message in a text editor and upload the file to a document-sharing application (e.g., Dropbox or Google Drive).
  • Enter the information requested below in a secure application (e.g., 1Password).

In your message to PagerDuty Support, share a secure link to the document or credentials.

To complete the integration, please send a message to the PagerDuty Support Team with the following information:

  1. Your company’s name.

  2. Your Okta organization’s integration Client ID.

    1. To find your organization's Client ID, navigate to the Jeli app in Okta.

    2. Select the Sign On tab and copy the Client ID value by clicking the clipboard icon.

  3. Your Okta organization’s integration Client secret.

    1. This can be found just below the Client ID (see step 2 above).

  4. Your organization’s Okta domain: For example, if your Okta organization URL is https://example.okta.com, the domain for your company would be example.okta.com. Please see Okta's documentation for more information on locating your organization’s URL.

    1. If your organization uses a custom domain, such as https://sso.example.com, then please include the fully qualified domain in your message to Support.
  5. You’ll also need to add the Okta subdomain to your Sign On settings. Navigate to the same Sign On tab in the app as noted above, and scroll down to Advanced Sign-on Settings to fill in your Okta subdomain. In the example below, your subdomain would be acme as part of https://acme.okta.com. If your organization uses a custom domain for Okta, please use your company name instead and include it in your message to Jeli.

📘

Requirement

The Okta subdomain should be all lowercase characters.

Okta | Jeli Integration User Guide

Manage User Access

Before users can log in to Jeli through Okta, you will need to provide them access via the Okta admin console. Adding Jeli’s Okta app allows you to assign privileges to use the app, which can be done at the user level or the group level, depending upon your requirements.

Assign Jeli Access to a User

Okta allows you to assign privileges to individuals, if you’d like to authorize a small number of users to access Jeli.

  1. In the Okta left menu, select Applications Applications.
A screenshot of the Okta UI demonstrating which item to select, Applications --> Applications

Select "Applications"

  1. From the list of Active apps, select Jeli.
  2. Select the Assignments tab, click the Assign dropdown and select Assign to People.
  3. Search and select the user(s) you wish to authorize.

Assign Jeli Access to a Group

It may be easier to manage app access as a group. Okta provides a default Everyone group, or you can create and populate a separate group, then give entire groups access to Jeli.

  1. In the Okta left menu, select Applications Applications.
A screenshot of the Okta UI demonstrating which item to select, Applications --> Applications

Select "Applications"

  1. From the list of Active apps, select Jeli.
  2. Select the Assignments tab, click the Assign dropdown and select Assign to Groups.
  3. Search and select the group you wish to authorize.

Remove Access to Jeli

You can revoke access to Jeli in Okta.

  1. In the Okta left menu, select Applications Applications.
A screenshot of the Okta UI demonstrating which item to select, Applications --> Applications

Select "Applications"

  1. From the list of Active apps, select Jeli.
  2. Select the Assignments tab and perform the following:
    1. Individual User: Locate the desired user and click to the right of their name.
    2. User Access via Group: If the user was granted access through a group, you can either remove the user from the group, or you can click on the group tab to revoke the entire group's access.

Log Into Jeli

  1. Navigate to the Jeli web app. On the Welcome screen, click Continue.
  2. In the field Email address for Okta SSO, enter youremail and click Continue.
  3. Complete the SSO authentication prompts.

Upon successful login, you will returned to Jeli where you can start interacting with the Jeli web app.

Uninstall the Okta | Jeli Integration

Please review Okta's documentation for more information about how to Delete app integrations.

FAQ


Can I have more than one enterprise SSO Provider?

For technical reasons, only one enterprise connection can be enabled at a given time. If you’re switching to Okta from Entra ID, you will need to coordinate a time for the cutover with PagerDuty Support.

In contrast, if you’re switching to Okta from another authentication method such as Google Auth, there is more flexibility. We can enable Okta while Google Auth is enabled, and then disable Google Auth once you’ve tested and confirmed Okta login.

What information does the Jeli app use?

Jeli’s integration with Okta is used for Single Sign-on (SSO) into the Jeli web app using your organization’s Okta account. We collect the following information for each user who signs in:

  • openid: This is the unique identifier Okta uses to identify your account.
  • email: Jeli uses email addresses to verify the organization’s domain, link individuals to their Jeli user account, and associate linking accounts on various other services like Slack and PagerDuty.
  • profile: We fetch first and last names (where applicable) from Okta user profiles to identify users and update Jeli profiles where needed.

Jeli does not require any access to the Okta API scopes and none should be granted. You can confirm this by going to the Okta Applications page, selecting Jeli, and navigating to the Okta API Scopes tab.

What if I'm having difficulty signing in to Jeli using Okta?

If for any reason you’re having difficulty signing in to Jeli using Okta credentials, try the following:

  • Make sure the user signing in has access to your Okta account and can sign in to your own Okta web portal independently of Jeli.
  • Check that the Jeli Okta app is added to your Okta account and that it is in the Active state, as listed on the Okta Applications page.
  • Confirm the user is authorized to use the Jeli app and their name is on the Assign Applications list (see: Manage User Access).
  • Confirm that you are using the domain Jeli has associated with your organization. For instance, if your company is Example, Inc. and your domain is example.com, that your email is [email protected].
  • Contact Support for further investigation.