Prerequisites

Okta SSO Prerequisites

• Have access to an Okta tenant
• Be an Okta administrator to that tenant

Moveworks SSO Prerequisites

• Your Moveworks organization should be initialized (verify with your account team)

• Note the following values.

  • data_center_domain - the data center where your organization is hosted (see table below).

  • subdomain - your organization's login subdomain. This will generally match your customer_id, but you can verify or customize it in General Information.

    🚧

    Warning

    Make sure you ONLY note your unique subdomain. For example, if you're organization's login subdomain is acme.moveworks.com, then your subdomain is acme and your data_center_domain is moveworks.com

  • [Optional] customer_id - unique identifier for your organization (can not be changed). This is stored as Org Name under Organization Details > General Information

    

    
    

Configuration Steps

Install Application

1. Go to the Okta Admin screen that lets you create Applications.

2. Click on Browse App Catalog.

   

3. Search and select Moveworks.

   

4. Add a logo for the Moveworks application:

   
   

5. Click Add integration.

   

6. Set the Application Label as Moveworks and click Done.

   

   Note: Make sure you get your Customer ID from your Customer Success Team before this next step.

Configure Moveworks Settings

1. On the General tab., add your subdomain, data_center_domain, and optionally your customer_id

   📘

   Tip

   You can leave data_center_domain blank if it is justmoveworks.com

   In this example, my data_center_domain was am-eu-central.moveworks.com and my subdomain was acme.

   

   
   

Add OIDC Configuration in MyMoveworks

1. Copy the Client ID , Client secret from the Sign On tab

   

2. Copy the idp_issuer. This is not in the Okta settings, but it should be based on your Okta instance name (e.g. If you login at https://acme.okta.com, then your idp_issuer is https://acme.okta.com

3. Navigate to SSO Settings in MyMoveworks

   

4. If you already see a studio config, edit it. Otherwise, choose Create.

5. Add your configuration using the values you've noted above

   • Moveworks Product: studio
   • Select Connector: okta or moveworks
   • Authentication Protocol: OIDC
   • IDP Redirect URL: https://{{subdomain}}.{{data_center_domain}}/login/sso/oidc
     • e.g. https://acme.am-eu-central.moveworks.com/login/sso/oidc
   • IDP Issuer: idp_issuer
     • e.g. https://acme.okta.com
   • IDP Client Id: idp_client_id (from Step 1)
   • IDP Client Secret: idp_client_secret (from Step 1)

6. Click Submit.

7. Wait a few minutes, then attempt to log into your instance at https://{{subdomain}}.{{data_center_domain}}