Skip to content

Identity & Security

Okta + ATALI ELECTRIC

Sign users in to ATALI ELECTRIC with Okta through SAML 2.0 and create, update and deactivate their accounts automatically with SCIM 2.0.

Start free trialAll integrations
Okta logoSAML 2.0 SSO; SCIM 2.0 provisioning (bearer token)

How it works

Firms that manage identity in Okta can make it the only way into ATALI ELECTRIC. Single sign-on uses SAML 2.0: Okta is the identity provider, ATALI ELECTRIC is the service provider, and users sign in from the Okta dashboard or from the ATALI ELECTRIC sign-in page, where they are redirected to Okta. Your Okta sign-on policies, including MFA, apply to every session. SSO is included in the Enterprise Platform plan.

Provisioning uses SCIM 2.0. When a user is assigned to the ATALI ELECTRIC app in Okta, an account is created with the right role; profile changes flow through; and when the user is unassigned or deactivated, ATALI ELECTRIC access is removed. Okta groups pushed to ATALI ELECTRIC map to roles such as analyst, reviewer, principal and billing, so a departing consultant loses access to client rent rolls and operating statements the moment HR offboards them. ATALI ELECTRIC configures this as a standard SAML and SCIM app integration in your Okta org and does not claim an Okta partnership or certification.

Authentication
SAML 2.0 SSO; SCIM 2.0 provisioning (bearer token)
Sync cadence
Real time: SAML at each sign-in, SCIM changes as Okta sends them

Data flows

  • SAML assertions InboundSigned SAML 2.0 assertions carrying the user's email as NameID plus first name, last name and group attributes.
  • User provisioning InboundSCIM 2.0 create, update and deactivate requests for users assigned to the ATALI ELECTRIC app.
  • Group push InboundOkta groups pushed over SCIM and mapped to ATALI ELECTRIC roles and client workspaces.
  • Sign-in and access audit OutboundSign-in events and role changes recorded in the ATALI ELECTRIC audit log and exportable as CSV for access reviews.

Field mapping

OktaATALI ELECTRIC
  • NameID (email)User login
  • userNameUser login
  • name.givenNameFirst name
  • name.familyNameLast name
  • emails[primary]Notification email
  • activeAccount status
  • Group membershipRole and workspace access

Set up in 5 steps

  1. 1In Okta, create a SAML 2.0 app integration using the ACS URL and audience URI shown under Settings, Security, SSO in ATALI ELECTRIC.
  2. 2Upload the Okta IdP metadata to ATALI ELECTRIC and test sign-in with one user.
  3. 3Generate a SCIM bearer token in ATALI ELECTRIC and enter it with the SCIM base URL in the Okta app's provisioning settings.
  4. 4Turn on create, update and deactivate, then push the groups that map to ATALI ELECTRIC roles.
  5. 5Require SSO for all users once the test group signs in successfully.

Used for

  • →Removing a departing analyst's access to client operating statements the same day they are deactivated in Okta.
  • →Enforcing the firm's Okta MFA policy for every user who can open rent rolls.
  • →Giving seasonal staff hired for protest season a reviewer role through an Okta group, then removing it when the season ends.

Stop overpaying commercial property tax on a flawed mass appraisal.

Upload an assessment notice. ATALI ELECTRIC returns a valuation audit and comp analysis in about two minutes.

Start free trial Explore demo