Follow these steps to connect Okta with Productive and enable user provisioning on login.
📌 Recommendation: Open Productive and Okta side by side in two browser tabs. This way, you can easily copy values from one platform to the other without losing your place.
📌 Note: You’ll need to be an admin in both Okta and Productive to complete this setup.
1) Create an app in Okta
1) Log in to your Okta Admin account.
2) Go to Applications > Add Application and select Create New App.
3) Choose:
Platform: Web
Sign-on method: SAML 2.0
4) Give the application a name, for example Productive, so you can easily find it later.
2) Connect Okta with Productive
1) In Productive, go to Settings > SSO and SCIM.
2) Copy the following values from Productive into the Okta app settings:
Single Sign-On URL → paste into Okta’s SAML settings under Single sign on URL.
Audience URI → paste into Okta’s SAML settings under Audience URI.
3) In Okta, under the SAML settings, set:
Name ID format: EmailAddress
Application username: Email
3) Enable user provisioning
To allow Productive to create new users automatically when they log in with SSO, you need to configure attributes in Okta and finish the connection setup.
1) In Okta, open your Productive app and scroll to Attribute Statements.
Add: FirstName →
user.firstNameAdd: LastName →
user.lastName(Email is already mapped as the Name ID.)
2) In Okta, copy the Metadata URL and paste it in Productive > Settings > SSO and SCIM under Metadata URL.
📌 Make sure the field is named Metadata URL, not Metadata.
3) Copy the Identity Provider Single Sign-On URL from Okta and paste it into Productive as well. In Productive, click Enable SSO to save your settings.
4) Back in Okta, go to Applications > Assign, choose your Productive app, and assign it to the employees who should have access.
📌 From now on, anyone you assign in Okta will be able to sign in to Productive. If they don’t already have an account, Productive will automatically create one the first time they log in.
