Single Sign-On (SSO) allows users to access Armanino Access using their organization's existing identity provider. To enable SSO, your organization will need an Armanino Access Administrator account and access to create Enterprise Applications in Okta. If you would like to enable SSO for your organization, please get in touch with Access.Support@armanino.com.
Configure SSO in Armanino Access
Log in to Armanino Access using an Administrator account. Only Administrators can configure SSO.
Open the menu and select SSO.
Review the SSO configuration requirements and acknowledge that your organization is familiar with SSO setup and ready to begin the configuration process.
Create an Application in Okta
Please work with the individual in your organization who has permission to create applications in Okta.
In the Okta navigation menu, expand Applications and select Applications.
Select Create App Integration.
Under the Create a new app integration menu, for Sign-in Method, select SAML 2.0, then click Next.
On the Create SAML Integration page, under General Settings, enter a name for your application and click Next.
Under SAML Settings, enter the following values from the Armanino Access SSO Configuration page:
Single Sign-On URL: Copy and paste the Reply URL from the SSO Configuration page shown above
Audience URI (SP Entity ID): Copy and paste the Entity ID from the SSO Configuration page shown above. For application username, please select Email, then click Next.
Application Username: Select Email
Assign Users and Groups
Select the Assignments tab.
Have the person with Okta permissions assign the users or groups that should have access to Armanino Access through SSO.
Select Save and Go Back.
Select Done.
Copy the Metadata URL
Navigate to the Sign On tab for the application you just created.
Scroll to the Metadata Details section.
Copy the Metadata URL.
Complete the SSO Configuration
Return to the Armanino Access SSO Configuration page.
Paste in the Metadata URL.
Select Validate URL.
Once the URL has been successfully validated, select Enable SSO.
After a few moments, the SSO Configuration Complete screen will appear, indicating that SSO has been successfully enabled.
User Access After SSO Is Enabled
When users sign in through SSO, they are automatically assigned to Audit Ally or TaxAdvantage based on the services your organization has contracted.
Organizations with Audit Ally engagements will have users assigned to Audit Ally.
Organizations with TaxAdvantage engagements will have users assigned to TaxAdvantage.
Organizations using both products will have users assigned to both groups.
Administrators can update user access at any time through User Management by adding or removing group assignments.
Users are not automatically assigned Administrator permissions.
If you need assistance configuring SSO, please contact us at Access.Support@armanino.com.