Ontap

Zero-trust HR access with Okta SSO

Bring enterprise identity management to your HR platform. The OnTap + Okta integration delivers single sign-on, multi-factor authentication, and automated user lifecycle management — so every employee has exactly the right access, always.

Join the waitlistBook a demo
One-click access
SSO
Enforced globally
MFA
User provisioning
Auto
Trust architecture
Zero

Identity + HR Unified

One identity, everywhere in OnTap

With Okta as your identity provider, employees access OnTap with a single click from their Okta dashboard — no extra credentials, no password resets. HR admins control access levels, MFA policies, and session security centrally from Okta, with all user events logged in OnTap.

  • Single sign-on (SSO) to OnTap via Okta — works with SAML 2.0 and OIDC
  • Enforce MFA policies across all OnTap users without IT intervention
  • Auto-provision OnTap accounts when employees join, using Okta SCIM
  • Auto-deprovision and revoke access when employees leave — instant, complete
  • Role-based access control aligned between Okta groups and OnTap permissions
  • Full access audit logs — every OnTap login, action, and session in Okta

Features

Everything you need, nothing you don't

  • Single Sign-On

    Employees click OnTap in their Okta app dashboard and are in — no passwords, no friction. SAML 2.0 and OIDC supported.

  • Adaptive MFA

    Okta's adaptive MFA evaluates context — device, location, behavior — and challenges only when risk is detected.

  • SCIM Provisioning

    New hires in OnTap trigger automatic Okta account creation. Leavers are instantly deprovisioned across all apps.

  • Group-Based Access

    Okta groups map directly to OnTap roles and permissions. Bulk access management across your entire org.

  • Lifecycle Automation

    From hire to exit — Okta and OnTap jointly manage the full employee access lifecycle without manual IT steps.

  • Security Analytics

    Unified access logs across Okta and OnTap. Detect anomalies, audit access patterns, and prove compliance.

100%
Access Control

Every user, every permission

Instant
Provisioning

On new hire creation

Zero-Trust
Security Model

Verify always, trust never

SCIM 2.0
Standard Protocol

Industry-grade integration

Security & Compliance

Enterprise security, without the complexity

HR data is among the most sensitive in any organization. With Okta managing identity and OnTap managing HR, you get a zero-trust security posture where access is always verified, always logged, and always appropriate to each employee's role.

  • Policy Enforcement

    Apply Okta security policies — session timeouts, geo-restrictions, device trust — directly to OnTap access.

  • Real-Time Alerts

    Okta and OnTap jointly alert security teams on suspicious login attempts or unauthorized access to HR data.

  • Compliance Logging

    Every OnTap action logged with Okta identity context. SOC 2, ISO 27001, and GDPR audit-ready.

  • Privileged Access

    Sensitive OnTap features — payroll, contracts, compensation — require step-up MFA via Okta policy.

How It Works

Zero-trust setup in three clear steps

  1. 1

    Configure Okta as your SAML/OIDC provider

    In OnTap settings, add Okta as your identity provider. Import your Okta metadata or enter your SSO endpoint URL. Guided by our setup wizard.

  2. 2

    Enable SCIM user provisioning

    Connect Okta's SCIM integration to OnTap. Map Okta user attributes to OnTap employee fields and configure auto-provisioning rules.

  3. 3

    Set access policies and go live

    Define which Okta groups access OnTap, which MFA policies apply, and what roles they receive. Activate and all users are managed automatically from day one.

Explore more

More in Connect your stack

Join the Okta integration waitlist

Be first in line when OnTap + Okta launches. Secure, automated, enterprise-grade identity management for your HR platform.

Start free trialBook a demo
  • 14-day free trial
  • No credit card required
  • Set up in under 30 minutes