SSO is a feature only available for Airtable Enterprise payment plans. If you are interested in inquiring about enterprise pricing, you can contact us here.
Airtable supports SSO through Okta. This article is intended for administrators who are looking to configure their provisioning/deprovisioning features.
SSO is a feature only available for users on Airtable Enterprise payment plans. To enable SSO (and provisioning/deprovisioning), have your admin contact Airtable at firstname.lastname@example.org.
The following provisioning features are supported:
- Push new users
- New users created through Okta will also be created in the third-party application.
- Push user deactivation
- Deactivating the user or disabling the user's access to the application through Okta will deactivate the user in the third party application.
- Note: For this application, deactivating a user means logging out all logged-in sessions and greying out the user where s/he shows up in sharing dialogs. The org admin will still be able to log into the user's account by resetting their Okta password. To permanently remove the user's account, the admin must log into the user’s account and delete it through Airtable's interface. This is so that admins can transfer out any bases or teams owned by that user. We will not charge for deactivated users.
- Reactivate users
- User accounts can be reactivated in the application (if they have only been deactivated through Okta, and not manually deleted).
Note: since Airtable uses emailDomains to identify enterprise SLAs, you will only be able to perform actions (i.e. provision/deprovision) on users whose Airtable accounts have the same emailDomain as the admin user's.
Under the Provisioning Tab, click the Configure API integration button.
Next, check the Enable API integration box; then click the Authenticate with Airtable button.
If you are not already signed in to Airtable, you will be redirected to Airtable, where you will need to sign into your Airtable account.
Once you do this, you will then get redirected back to Okta with a message saying you have successfully authenticated.
After you successfully authenticate, two new options will appear under Settings on the left side of your screen—To App and To Okta. Select the To App option, then check the features you want to enable. (In most cases, you'll likely want to enable Create Users and Deactivate Users.) Be sure to click the Save button when you're done.
Once you've gone through these steps, you can provision and deprovision users under the Assignments tab.
If you encounter any issues or need additional assistance, please email email@example.com.