About Okta‍

Okta is an identity platform companies use to control who can sign in to their software. It gives every employee, freelancer and partner one set of credentials for all their connected applications, and gives IT one place to grant or remove access.

Moments Lab and Okta‍

With Okta, users can sign in with the company credentials they already have, and your admin decides what each of them can see. Nothing else changes: your media stays where it sits, your team keeps working in the same tools, and Moments Lab becomes one more app in the Okta dashboard they open every morning.

How it works‍

Okta is a sign-in connection, not a data connection. Sign-in runs over OAuth against your Okta tenant, and Okta stays the system of record for who exists at your company.

Signing in and getting an account.

Once single sign-on is turned on for your workspace, anyone who signs in with Okta gets a Moments Lab account created for them automatically, with a default role and organization your admin picks. SCIM, the standard for syncing user lists between two systems, is not supported today, so accounts are not pushed across from Okta in advance.

Who sees what.

Roles and organizations are set in Moments Lab, not carried over from Okta. Admin is the only role that sees all media by default. Everyone else sees only the media shared with an organization they belong to. That is how you open one show to a freelance editor without opening the catalog. User access and activity are logged with timestamps, and audit events can be sent to your own systems by webhook.

Files and setup.

No media or metadata moves between the two systems. Moments Lab is SOC 2 Type II certified, and Auth0, the identity layer underneath the platform, is an Okta company certified to SOC 2 Type II and ISO 27001. To switch it on, your admin asks our support team, and we set the connection up with your IT.

‍