Note: This doc is for the Drift Email product. If you are looking to setup SSO via Okta for Drift chat, please see this help doc.

Okta SCIM can manage these actions for Drift Email:

• Create users

• Update users

• Delete users

• Password sync

Important notes:

• You must have Admin user permissions on Drift Email to enable Okta.

• We enable SSO through SWA. We do not support SAML for this integration.

Don't see this option in your Settings? Reach out to Support.

1. Get your API token in Drift Email

Navigate to Settings > Integrations to find your API token.

 

2. Configure provisioning in Okta

In Okta, enable API Integration and enter the API Token you retrieved earlier. Click “Save”.

 

Under Provisioning Features, select Creating, Updating, Deactivating, and Sync Passwords.

Under Sync Password, check “Sync a randomly generated password”. Click “Save”.

In the Sign On tab, set the username format to “Email”. Click “Save”. 

You can now assign people to the app.

Make sure that the "User Name" and "Primary Email" are the same value. Drift Email requires members to use email addresses to log in, so it is not possible to have different values for these fields.

 

FAQ

I assigned a user, but they can't log in.

You may have to do a password reset in Okta. Under Assignments, click the edit button for the user you just assigned.

 

Click the “Reset Password” Link. The user should now be able to login using the Okta Browser Extension.

 

I'm trying to add a user, but Okta is saying they already exist.

This happens when the user was added through the Drift Email interface directly, before Okta was enabled.

Make sure to delete users from the Drift Email app under Settings > Users before configuring Okta.

If users are still present in the Drift Email UI and are now blocked from being added by Okta, reach out to Support or your Customer Success Manager to re-enable them.