SSO - Okta Integration

This page will show you how to create an SSO connection to BeeBole Timesheet using Okta.
These parameters are just an example. If you have specific protocols in place to define Okta apps, please make sure to add your custom steps to the one described here under.

Create a BeeBole Timesheet app

Once connected as an admin to your Okta portal, create a new app.

Step 1



Make sure to define it as a Web platform using the OpenID Connect protocol.

Step 2

In the next step, give your new app a name, such as BeeBole or BeeBole Timesheet.



Upload a logo of your choice. If you want to use the BeeBole logo, you can use the logo available the following URL:

Define the Login redirect URI.
The URI is https://beebole-apps.com/sso2cb/xxxxxx where xxxxxx should be replaced by your account ID.
You can directly retrieve the URI in your BeeBole account in Settings > Account > OpenID Connect

Step 3

The app is now created in your Okta portal.

In the next screen you will be able to retrieve the Client ID and the Client Secret.
Both should be added in your BeeBole account under Settings > Account > OpenID Connect


Step 4

Finish the app configuration in the General Settings section, under Application




And the Login section


Replace xxxxxx with your BeeBole account ID or retried the Initiate login URI in your BeeBole account under Settings > Account > OpenID Connect

Step 5

and define the Okta API endpoints.

You can read more about these in the Okta documentation: https://developer.okta.com/docs/reference/api/oidc/

These URIs should look like this:
  • Authorize: https://${yourOktaDomain}/oauth2/default/v1/authorize
  • Token: https://${yourOktaDomain}/oauth2/default/v1/token

Step 6

Assign the new app to the right people or group of people using the Assignment tab in Okta.

Connect to BeeBole using Okta SSO as an employee

The employees assigned to the BeeBole app in your Okta portal will now see a new BeeBole Timesheet app in their Okta end user dashboard.
Clicking on the app will automatically connect them and redirect them to their BeeBole account.