Confirm your Okta setup

• Make sure your Okta environment is configured to use SAML 2.0 with Flexera.

Create the custom attribute

1. In the Okta Admin Console, go to Directory > Profile Editor and select the Spotinst user profile.
2. Select Add Attribute and enter:
   • Data type: String
   • Display name: OrgAndUserGroups
   • Variable name: OrgAndUserGroups
3. Select Save.

Map the attribute in the Flexera app

1. In the Okta Admin console, go to Applications > Applications and open the Flexera Spotinst app.
2. Open the Sign On tab.
3. In the SAML 2.0 settings, add:
   • Attribute name: OrgAndUserGroups
   • Name format: Unspecified
   • Value: appuser.OrgAndUserGroups

Update the certificate

• Generate a new certificate in Okta and upload it to your Flexera organization.

Assign users to groups

1. In the Okta Admin Console, go to Directory > People.
2. Select a user who needs Flexera group assignments.
3. Open the Applications tab, locate the Spotinst app, and select Edit.
4. Enter the OrgAndUserGroups value:
   • Single group:
     SPOTINST-{OrganizationID}:{UserGroupId}
   • Multiple groups for one organization:
     SPOTINST-{OrganizationID}:{UserGroupId1},{UserGroupId2}

Example