Set up SSO and SCIM

About

Single Sign-on (SSO) allows users to login to Walnut using their existing account information from Google, Microsoft, Okta or many others. 

• SSO / SCIM is a paid feature, so if you haven’t got SSO / SCIM as part of your current package, reach out to your CSM for details.
• You must be a Walnut admin to set up SSO and SCIM.

Set up SSO and SDIM

Step 1: Select your SSO provider

Walnut supports custom SAML and OpenID connections as well as most providers, including Okta and Azure AD. 

Go to this website (https://workos.com/docs/integrations) for a list of SSO providers.

You can only have one SSO provider, but you change providers - see the section in this article Change your SSO provider.

Step 2: Set the SSO toggle to ON

1. Navigate to Company Settings and scroll down to the SSO section.
   
   
   
2. The Configure SSO toggle default is OFF, so set it to ON. In the image above OKTASAML is already connected. But you will click Set up and follow the on-screen workflow / wizard.

Step 3: Complete the SCIM on-screen workflow

• Each provider has a slightly different on-screen workflow / wizard but the principles are the same. For example, the OKTA workflow includes the steps shown in the screenshot.
• Walnut doesn’t support Push Groups, so ignore steps that relate to Push Groups.
• It’s important to include all Walnut users as part of the SCIM setup otherwise they won’t be able to login using their Walnut username and password.

Step 4: Test the connection

This is the final step in the workflow.

Access your company’s portal to test the connection.

• Once SCIM is enabled, provisioned users will receive an email to join Walnut or they can go directly to https://app.teamwalnut.com/ and log in.
• Users initially receive the Presenter role but you can change that in Company Settings>Users.

Disable SSO

Set the Configure SSO toggle to OFF. When off, users will not be directed to the SSO login page and they will have to login manually. 

To reactivate, set the Configure SSO toggle to ON.

Change your SSO provider

On the Configure SSO line, click Change and follow the workflow / wizard.

Remove your SSO provider

On the SSO row, click the X button. 

To add a different provider, repeat steps 1 - 4 in the section Set up SSO and SDIM.