Single Sign-On (SSO)

Single Sign-On (SSO) functionality for enterprise customers is available to access Reimbi through a single authentication source, like Okta. This allows IT administrators to better manage team access and keeps information more secure. SSO is only used for staff account users. It has no impact on your requesters/candidates.

Reimbi uses SAML (Security Assertion Markup Language), a standard that permits identity managers, Okta for example, to safely pass authorization credentials to service providers like Reimbi.

Okta Configuration

Create a New Application Integration

1. Navigate to https://your-okta-instance.okta.com/admin/apps/active
2. Click the "Create App Integration" button
3. Select SAML 2.0 as the sign-on method

Configure SAML Integration

Set up the basic application details:

• App name: Reimbi
• Logo: https://www.reimbi.com/branding

Configure SAML Settings

Configure the SAML integration with the following settings:

• Single sign on URL: Found in Reimbi Company Settings -> SSO tab
• Audience URI: Found in Reimbi Company Settings -> SSO tab

Assign Users

Navigate to the Assignments tab in Okta to assign users to Reimbi.

Reimbi Configuration

Set Up Metadata URL

1. Navigate to Company Settings, open the Integrations page, and click the Configure link next to Okta.

2. Locate the Identity Provider metadata URL field
3. Enter the URL provided by Okta (found in the Sign on tab of Okta application settings)

Using SSO Login

Initial Login Process

New users must initiate their first Reimbi login through Okta:

1. Access Reimbi through the Okta dashboard
2. Click on the Reimbi application icon

Direct Login Process

For subsequent logins, users can:

1. Go directly to the Reimbi login page: https://app.reimbi.com/account/login/
2. Enter their email address
3. Be automatically redirected to Okta for authentication

Note: Staff users will not appear on the Staff accounts page in Reimbi until after their initial login.

Permission Management

Default Permissions

Configure default permissions for new staff users in the Company Settings:

1. Navigate to Company Settings -> SSO tab
2. Select the default permissions for new users
3. Save your changes

Important: Changes to default permissions only affect new users and have no impact on existing staff accounts. Individual permission modifications can be made as needed through Company Settings -> Staff accounts.