Submit a request

How can we help?

Articles in this section

SSO/SAML: additional providers

Updated

Provider-specific SAML and SCIM setup for Okta and OneLogin.

On this page:

Okta

Covers SAML and SCIM setup, so users can be provisioned automatically as well as authenticated. Requires the Enterprise plan and Insightly administrator access. This process works alongside the SAML/SCIM configuration on the Insightly side. See SSO / SAML for that half of the setup.

Insightly Okta Integration Detail Page — This screenshot shows the Okta integration listing for Insightly CRM, displaying supported protocols including SWA, SAML, and SCIM. Users can initiate a free trial with Okta or add the integration directly using the buttons in the top right corner.

Insightly Okta Integration Detail Page

Add the integration and configure SAML

  1. Navigate to the Insightly integration page in Okta and click Add Integration.
  2. Under General Settings, enter a name for the application and click Next.
  3. In Insightly, go to System Settings > Security > SAML and SCIM and copy the Sign-in Page URL.
  4. Back in Okta’s Configure SAML step, paste that URL into the Sign-in page URL field, select Email for Application username format, and click Done.
Okta Advanced Sign-on Settings for Insightly SAML — This screenshot shows the final configuration screen in Okta for setting up SAML-based single sign-on with Insightly CRM, including the Sign-in page URL field and credential details such as username format and password reveal options. A blue info banner notes that password reveal is automatically disabled when SAML is in use, which is important for admins to understand when completing the SSO setup.

Okta Advanced Sign-on Settings for Insightly SAML

  1. On the new app’s Sign-on tab, find the first active certificate under SAML Signing Certificates, open its Actions menu, and select Download Certificate.
SAML Signing Certificate Actions Menu — The image shows the SAML Signing Certificates page in Insightly CRM, displaying an active SHA-2 certificate created today and expiring in March 2033, with an open Actions dropdown menu offering options to “View IdP metadata” or “Download certificate.” These options are essential for completing SAML SSO setup, as the certificate must be downloaded and shared with your identity provider to establish trust.

SAML Signing Certificate Actions Menu

  1. Back in Insightly, upload that certificate in the Verification Certificate field on the SAML and SCIM settings page, and click Save.
SAML and SCIM Configuration Settings Page — This screenshot shows the SAML Single Sign-On and SCIM Provisioning Settings page within Insightly CRM’s System Settings, displaying fields for enabling SAML sign-on, uploading a verification certificate, entering a sign-in page URL, and enabling SCIM provisioning. This page is relevant for administrators who need to configure single sign-on authentication or automated user provisioning for their organization.

SAML and SCIM Configuration Settings Page

Configure SCIM

Confirm SCIM is enabled on the Insightly side first (same SAML and SCIM settings page).

  1. On the Insightly app’s Provisioning tab in Okta, click Configure API Integration.
Insightly Provisioning Tab in Okta Settings — The screenshot shows the Provisioning tab of the Insightly app integration in Okta, where provisioning is currently not enabled. Users need to click “Configure API Integration” to enable automated user account creation, deactivation, and updates between Okta and Insightly.

Insightly Provisioning Tab in Okta Settings

  1. Check Enable API Integration, and paste the SCIM Token into the API Token field.
Insightly SCIM API Integration Configuration Screen — This screen shows the API integration setup form where administrators enter the Insightly Base URL (for example, https://<your-subdomain>.insightly.com/scim) and an API Token to enable user import and provisioning. A “Test API Credentials” button allows users to verify the connection before saving the settings.

Insightly SCIM API Integration Configuration Screen

  1. Click Test API Credentials to confirm the token works, then Save.
Insightly API Integration Setup Success Screen — This screenshot shows a configuration panel where users enter their Insightly Base URL and API Token to enable user import and provisioning features, with a successful verification message displayed at the top. It would be relevant to someone following steps to connect Insightly via API, confirming what a successful setup looks like after testing credentials.

Insightly API Integration Setup Success Screen

  1. On the Provisioning tab, click Edit, and enable Create Users, Update User Attributes, and Deactivate Users as needed, then Save.
Okta Provisioning to App Settings Panel — This screenshot shows the Provisioning to App configuration screen in Okta for the Insightly integration, displaying three disabled options: Create Users, Update User Attributes, and Deactivate Users. These settings control how Okta automatically manages Insightly user accounts, and enabling them would allow Okta to create, update, or deactivate users in Insightly based on changes made in Okta.

Okta Provisioning to App Settings Panel

  1. Supported attributes can be reviewed further down the Provisioning to App page. Email and email type are read-only.
Insightly Attribute Mappings in Okta Configuration — This screenshot shows the attribute mapping table in Okta for the Insightly CRM integration, listing fields like username, given name, family name, email, and email type alongside their values and sync settings. Administrators use this screen to configure how user profile data in Okta is mapped and pushed to Insightly when accounts are created or updated.

Insightly Attribute Mappings in Okta Configuration

  1. On the Assignments tab, use the Assign dropdown to select Assign to People (or Groups). Assigned users appear in Insightly shortly after. Progress can be tracked in View Logs.
Insightly App Assignments Tab with Assign Dropdown — The screenshot shows the Assignments tab of the Insightly app in Okta, with the “Assign” dropdown menu expanded to reveal two options: “Assign to People” and “Assign to Groups.” This is relevant for administrators who need to grant Insightly access to individual users or entire groups within their organization.

Insightly App Assignments Tab with Assign Dropdown

OneLogin

Covers SAML setup, working alongside the SAML configuration on the Insightly side. See SSO / SAML for that half.

Add a new SAML Custom Connector

  1. In the OneLogin administration portal, click the Applications dropdown and select Applications.
OneLogin Applications Menu Dropdown Options — The OneLogin admin navigation bar is shown with the Applications menu expanded, revealing three options: Applications, Portal Tabs, and Custom Connectors. This helps users locate where to configure application settings within the OneLogin platform when setting up an integration.

OneLogin Applications Menu Dropdown Options

  1. Click Add App, then search for SAML Custom Connector and select SAML Custom Connector (Advanced).
Searching for SAML Custom Connector in OneLogin — The image shows the OneLogin application search interface with “SAML Custom Connector” typed in the search box, displaying “SAML Custom Connector (Advanced)” by OneLogin, Inc. as the result. This step guides users to locate the correct application needed to configure SAML-based single sign-on (SSO) integration with Insightly.

Searching for SAML Custom Connector in OneLogin

  1. Enter a Display Name and click Save.
Adding a SAML Custom Connector Configuration — The screen shows the portal configuration page for adding a SAML custom connector in Insightly, including fields for display name, portal visibility toggle, and icon upload areas. This is relevant for administrators setting up single sign-on (SSO) integration, as it illustrates where to name the connector and provide branding icons in the required formats and dimensions.

Adding a SAML Custom Connector Configuration

Configure SAML

  1. In the app’s Configuration section, enter the Sign-in page URL from Insightly’s SAML and SCIM settings page into all four fields: Audience (EntityID), Recipient, ACS (Consumer) URL Validator, and ACS (Consumer) URL. Click Save.
SAML Custom Connector Configuration Settings — This image shows the Configuration tab of a SAML Custom Connector setup in OneLogin, displaying fields for RelayState, Audience (EntityID), Recipient, ACS Consumer URL Validator, and ACS Consumer URL, all populated with an Insightly CRM SAML endpoint URL. This would matter to someone setting up single sign-on (SSO) for Insightly, as it shows exactly which URLs to enter in each required field.

SAML Custom Connector Configuration Settings

  1. In the SSO section, click View Details to see the X.509 certificate.
SAML 2.0 SSO Configuration Settings Panel — This image shows the SSO settings page in Insightly CRM, displaying options for enabling SAML 2.0 single sign-on, including a 2048-bit X.509 certificate and SHA-1 as the selected SAML Signature Algorithm. This would matter to administrators configuring secure single sign-on authentication for their organization.

SAML 2.0 SSO Configuration Settings Panel

  1. Click Download to save the certificate in X.509 PEM format.
X.509 Certificate Download Interface — This shows a panel displaying an X.509 certificate in PEM format, with the certificate text blurred for privacy. Users can copy the certificate to their clipboard or download it using the dropdown and Download button at the bottom.

X.509 Certificate Download Interface

  1. In Insightly, go to System Settings > SAML and SCIM, check Enable SAML Sign-on, click Select File in the Verification Certificate field, choose the downloaded PEM certificate, and click Save.
Insightly SAML SSO and SCIM Settings Panel — This screenshot shows the SAML Single Sign-On and SCIM Provisioning Settings configuration screen in Insightly, where an administrator can enable SAML login, upload a verification certificate, enter a sign-in page URL, and optionally enforce SAML login for all users. These settings are used to connect Insightly to an identity provider like OneLogin for centralized authentication management.

Insightly SAML SSO and SCIM Settings Panel

You can then sign in to Insightly through the OneLogin portal.

OneLogin Dashboard with Insightly SAML App — The OneLogin single sign-on portal displays an “Insightly SAML” application tile under the Frequents tab, associated with the Company account for Insightly, Inc. A user would click this tile to access Insightly CRM through SAML-based single sign-on authentication.

OneLogin Dashboard with Insightly SAML App

Related to

Related articles

Powered by Zendesk