Get the Wistia app in the Okta Integration Network
Wistia has an official integration with Okta, which is available here in the Okta Integration Network. This makes the configuration process very easy within Okta.
Note
You'll need admin access in Okta to add and configure applications.
Head to the App catalog in Okta to search for Wistia and then add the integration.
After configuring the app in Okta, collect the IdP metadata URL and send it to Wistia:
Under the “SAML Signing Certificates” heading, locate the active “SHA-2” certificate.
Click the “Actions” dropdown and choose “View IdP Metadata.”
Copy the metadata URL from the browser tab that opens, then paste it into the SSO section of your Wistia account settings.
Create a Custom SAML application in Okta (optional)
Note
This manual setup process is entirely optional, and we recommend the official Wistia integration with Okta instead.
If needed, it is possible to manually configure a custom SAML application with the following steps:
Within your Okta Organization, click “Applications,” then “Create App Integration.”
Choose “SAML” and click “Next.”
Name the app
Wistia. For the logo, you can use this file.Check the “Do not display application icon to users” checkbox. Click “Next.”
Enter the following values in the “(A) SAML Settings” section:
Field | value |
Single sign-on URL | |
Identifier (Entity ID) |
|
Audience URI (SP Entity ID) |
|
Name ID format |
|
Application username |
|
Enter the following values in the “(B) Attribute Statements (optional)” section:
Name | Name Format | Value |
Unspecified | user.email | |
firstName | Unspecified | user.firstName |
lastName | Unspecified | user.lastName |
5. Click “Next.”
6. Choose the “I’m an Okta customer adding an internal app” option and click “Finish.”
Lastly, collect the metadata URL to finish setting up SSO in your Wistia account:
7. Under the “SAML Signing Certificates” heading, locate the active “SHA-2” certificate.
8. Click the “Actions” dropdown and choose “View IdP Metadata.”
9. Copy the metadata URL from the browser tab that opens and paste it in the SSO section of your Wistia account settings.
SCIM provisioning with Okta
SCIM provisioning allows your team admins to automatically sync users and groups between your identity provider and Wistia.
Note
SCIM provisioning can only be enabled by Account Owners.
With SCIM provisioning enabled in Wistia, admins can create, update, and deactivate users directly from Okta, assign roles (Manager, Standard User, Limited User, and Viewer) at the individual or group level, and push Okta groups to create contact groups in Wistia.
SCIM is set up on the same Okta app you use for Wistia SSO, so finish the SSO steps above first. Then follow our SCIM Provisioning with Okta guide to generate your SCIM token, connect it in Okta, and assign users.
Updating your Okta certificate or switching identity providers
If your Okta signing certificate is renewed, or you move Wistia to a new identity provider, you don't need to contact Wistia. Collect the new IdP metadata URL, then paste it into the SSO page in your Wistia account settings and click "Update SSO Provider."
Wistia only supports sign-in that starts from Wistia. Launching Wistia from the app tile in your Okta dashboard may fail. Have users start from your SSO login URL (https://<account>.wistia.com/login/sso) or the "Sign in with SSO" button, or add an Okta bookmark app that points to that URL.
More details on Wistia SSO
For more information on our SSO functionality and what we currently support, check out our main SSO article, which includes lots of details and an FAQ section with answers to common questions.