Skip to main content

Integrate Lattice HRIS with Okta

Poppy
  • Updated

Admins will be able to integrate with Okta and set up Lattice as their company's source of truth for employee data.

Before you start

  • You must be a super admin in both Lattice and Okta.
  • You will need to request access to generate a Lattice API key, by following these steps - Request an API key. 
  • If you were previously using Okta to provision users to Lattice Talent, please disconnect the Okta provisioning following Disconnect your Okta SCIM Integration.
  • If you were previously using Okta SSO and already have it set up for Lattice, it will continue to work. 

Supported features

  • Profile Sourcing: A profile source is an application that acts as the source of truth for user identities. Lattice HRIS is the profile source for the Lattice HRIS to Okta integration. 
    • If more than one profile source is listed on the Profile Sources page, you can prioritize them so that user profile attributes can be sourced by different systems, based on their assignments. At any given time, there can only be one profile source for a user's profile.
    • Learn more about Okta Profile Source Documentation. 
  • Import Users: Users created in Lattice HRIS can be imported into Okta and either matched against existing Okta users or created as new Okta users.
  • Update user attributes: When user attributes are updated in Lattice, they will be updated in Okta.
  • Deactivate/reactivate users: When users are deactivated in Lattice, they will be deactivated in Okta. 

Initiate the connection

  1. In Lattice, navigate to Company > Platform > Integrations > select Enable SCIM.
  2. Go to Integrations > API Keys and generate a new API key. Save this for later as we will enter it in Okta. If you do not have access to do this, you need to request access to generate a key following these steps: Request an API key. 
  3. In Okta, go to Application > Applications > select Browse App Catalog.
  4. Select Lattice HRIS. Make sure to choose the one with "HRIS" next to Lattice. 
  5. Select Add Integration.
  6. You will be prompted to enter General Settings. Next to subdomain, enter your company’s subdomain name and choose Done.
    1. The subdomain is the first portion of your Lattice URL. For example, if your Lattice URL were microsoft.latticehq.com, you'd enter Microsoft.
  7. Go to the Sign On tab and update the Application Username format to Email.
  8. Navigate to the Provisioning tab, click on Configure API Integration, and enable API integration.
  9. Enter the API key you previously retrieved from Lattice.
  10. Paste it in > Select Test API Credentials.

Set up in Okta and run your first import

  1. In your Lattice HRIS app in Okta, go to Provisioning > To Okta.
  2. Select your settings in Okta.

  1. Allow Lattice HRIS to source Okta users & set your threshold to 1% (recommended for testing)  

  1. Go to Import > Import Now.

Once imported, you should be able to see imported users in the Assignments tab.

What information will flow into Okta by default?

Okta Attribute LatticeHQ Field
Email Username
Legal First name Given name
Legal Last name Family name
HRIS Middle Name Middle Name
Email Primary email
Work Email Primary email type
Title Title
Name (Preferred full name) Display Name
Preferred display name Nickname
phoneNumber Primary Phone
Phone Primary Phone type
Time Zone Time zone
Employee Type User type
Employee ID Employee number
Department Department
Manager ID Manager value
Manager Name Manager display name
Manager Email Manager Email
Job type Job type
Job level Job level
Last working day Last working day
Birthdate Birthdate
Start date Start date
Work Location State Work Location State
Work Location Country Work Location Country
Work Location Name Work Location Name
Employment Status Employment Status
Email Username
Legal First name Given name
Legal Last name Family name

Adding custom attributes in Okta

  1. Make sure that these custom fields are already created in Lattice.
  2. In Okta, navigate to your Lattice HRIS app, and go to Provisioning > To Okta.
  3. Scroll down> select Go to Profile Editor.
  4. Select Add attribute. You will then see a form to enter the values. 

Example: Adding an attribute for the Home Office

  • Variable name: homeOffice
  • External name: homeOffice
  • External namespace: urn:ietf:params:scim:schemas:extension:lattice:attributes:1.0:User
    • Please note that this is the external namespace to use when adding ANY custom attributes from Lattice.
  • Attribute required: Not required (do not select).

Related articles