Tandem Health allows users to log in via Okta as Single Sign-On (SSO) using the pre-built Tandem Health application in the Okta Integration Network. This document details how to configure SSO for your organization.

Prerequisites

In order to proceed with configuring login with SSO through Okta, you must:

• Have access to an Okta tenant
• Be an Okta administrator on that tenant
• Have an activated Tandem Health production tenant with admin access

Supported Features

• Service Provider (SP)-Initiated Authentication (SSO) Flow — This authentication flow occurs when the user attempts to log in to the application from Tandem Health at app.tandemhealth.ai/login. IdP-initiated sign-in (clicking the Tandem Health tile in the Okta dashboard) is not supported.
• Universal Logout — Okta-driven session termination propagates to Tandem Health, so when a user is signed out of Okta they are signed out of Tandem Health as well.

Note: Tandem Health does not support Just-in-Time (JIT) or SCIM provisioning. User accounts are created by the Tandem Health support team after you send the list via the Intercom widget (the ? icon on any Tandem Health page). Authorization within Tandem Health is managed by your Tandem Health tenant admin through role-based permissions.

Configuration Steps

1. Request Tandem Health access

If your organization does not already have a Tandem Health tenant, request one through your Tandem Health contact or at https://www.tandemhealth.ai.

2. Receive credentials from Tandem Health

The Tandem Health team will provide an admin email and a temporary password for your tenant. You will use these credentials during the Express Configuration step below.

3. Add the Tandem Health application in Okta

1. In Okta, go to Applications → Browse App Catalog.
2. Search for Tandem Health and click Add Integration.
3. Click Done.

4. Express Configure SSO