Requirements
You must have a Hive workspace with the Enterprise Security add-on. You must also be a System Admin in that workspace. If your workspace has no System Admin, a workspace Admin can do the setup.
Supported Features
IdP-initiated SSO
SP-initiated SSO
JIT (Just in Time) Provisioning
Configuration Steps
After you add Hive from the Okta Integration Network (OIN), enter your Hive Workspace ID in Okta:
In Hive, open Workspace settings. Under Advanced, select Security, then select Authentication.
Under Your Workspace ID, select Copy workspace ID. Keep this page open. You need it again later.
In Okta, open the Sign On tab of the Hive app and edit the settings. Under Advanced Sign-on Settings, paste the ID into the Workspace ID field, then save.
Next, copy three values from Okta into Hive. In Okta, they are under Metadata details on the Sign On tab of the Hive app:
Okta Sign on URL → Hive SAML SSO URL
Okta Issuer → Hive Identity Provider Issuer
Okta Signing Certificate → Hive Certificate. Paste the full certificate text. Do not add spaces or blank lines.
Paste the values into the fields on the Authentication page in Hive. Hive saves each field when you click out of it.
SP-initiated SSO
Go to https://app.hive.com
Enter your email
Click the "Sign in with SSO" option
Notes
The following SAML attributes are supported:
firstName (user.firstName)
lastName (user.lastName)
Hive uses the name only when Okta sends both a first name and a last name, and only when the user does not have a name in Hive yet.
The first time a person with a Hive account signs in with SSO, Hive sends them an email to verify the link to Okta. If a person does not have a Hive account yet, Hive creates the account, adds the person to your workspace, and sends them the same verification email.