Advanced Okta setup for Premium connectors and additional supported Smartsheet roles
In addition to the default roles, the Okta integration supports additional Smartsheet Premium Connector.
You must have these Smartsheet Premium Connectors enabled for your plan prior to mapping and provisioning these Smartsheet roles through Okta. Contact your Customer Success Manager or Account Team to purchase and enable these features.
Smartsheet Roles |
Mapping Values |
Variable Names (Preferred) |
---|---|---|
Smartsheet Jira User |
JIRA_USER |
smartsheetJiraUser |
Smartsheet Jira Admin |
JIRA_ADMIN |
smartsheetJiraAdmin |
Smartsheet Salesforce User |
SALESFORCE_USER |
smartsheetSalesforceUser |
Smartsheet Salesforce Admin |
SALESFORCE_ADMIN |
smartsheetSalesforceAdmin |
These Smartsheet Premium Connectors are not included by default in the list of Attributes for the Smartsheet User Profile.
To add the Smartsheet Premium Connectors to your list of Attributes:
- In Okta, go toDirectory>Profile Editorand select theSmartsheet User profilecreated for this integration.
- SelectAdd Attribute.
- For each field, refer to the Smartsheet Roles indicated in the table above.
For example, for the Smartsheet Jira User role, use the following settings, making sure the spelling and capitalization are correct:
- Display name: Smartsheet Jira User
- Variable name: smartsheetJiraUser
- External name: roles.^[type=='JIRA_USER'].value
- External namespace: urn:ietf:params:scim:schemas:core:2.0:User
- Save your changes and add the other attributes. There is no need to change any of the other parameters.
- For eachSmartsheet User Attribute, change theExternal name类型. Notice how the type is denoted with a double equals sign. The External namespace will be the same for all attributes. Here is how the list of Attributes appears once you’ve added all four Smartsheet Premium Connector roles.
- Update the Mappings. SelectMappings>Okta User to Smartsheet mappings.
- For each Smartsheet Premium Connector role mapping, add an expression with the Smartsheet Premium Connector related value.
Here are the expressions for all four Smartsheet Premium Connector roles. Make sure that the spelling is correct.- isMemberOfGroupName('Smartsheet US Jira User) ? 'JIRA_USER' : ''
- isMemberOfGroupName('Smartsheet US Jira Admin) ? 'JIRA_ADMIN' : ''
- isMemberOfGroupName('Smartsheet US Salesforce User) ? 'SALESFORCE_USER' : ''
- isMemberOfGroupName('Smartsheet US Salesforce Admin') ? 'SALESFORCE_ADMIN' : ''
- Preview the mappings for a user that assigned all of the roles. This example uses Group ids to check Okta group membership.
- If the mappings look correct, apply the mapping changes and provision these Smartsheet Connector roles through Okta.