You can map groups and roles from Okta to Canto using Okta group names. The name of each group in Okta must match the corresponding group name in Canto exactly.
Please note: You are required to have Single Sign On (SSO) activated for your account in order to map Groups and Roles from Okta to Canto. Only Administrators and users with the privilege to Manage Users & Groups can access this function. |
How to find and manage Groups in Okta
Groups in Okta are managed by your Okta Administrator. To view your existing Groups or create new ones:
- Sign in to your Okta Admin Console.
- Go to Directory > Groups.
- Here you can see all existing groups and their members.
- To create a new group, click Add Group.
- Enter a name for the group in the Name field and click Save.
Please note: Make a note of the exact name of each group you want to map to Canto. The name must be identical in both Okta and Canto, including capitalization. |
How to map your Okta Groups to Canto
If SSO is activated and you are logged in as an Administrator or have the privilege to Manage Users & Groups, you can map Okta groups to Canto.
- In Canto, navigate to Settings > Users & Groups > Groups.
- Enter the exact Okta group name and click Create. Your group will be mapped to Canto.
Please note: If a user belongs to a group in Okta but no matching group exists in Canto, the user will not be assigned to that group upon login. Make sure each Okta group you want to use has a matching group created in Canto first. |
How to map Custom Roles to Canto using Okta Groups
Please note: These roles must be managed within Okta. To map the Contributor or Consumer role, please contact the Support Team. |
You can map custom roles to Canto by assigning users to named groups in Okta that correspond to Canto roles.
- In Okta, create a group for each role you want to map (for example, a group named "Canto Admin" or "Canto Contributor").
- Assign the relevant users to each group in Okta at Directory > Groups.
- In Canto, navigate to User menu > Settings > Users & Groups > Privileges.
- Click the plus icon to add a new Custom Role.
- Enter the name of the Okta group you want to assign to this role.
Please note: Groups assigned to a user via Okta SSO are visible on that user's individual profile in Canto. However, they may not appear in the Groups column on the Users List page. This is a known limitation. |