NATIVE Identity & SSO · Enterprise

Okta + eCardWidget

One-click Okta sign-in for your admins, and SCIM provisioning that keeps your recognition directory — birthdays and work anniversaries included — in sync with Okta automatically.

Get a Demo Setup guide →

What you unlock

SSO and SCIM directory sync with Okta

One-click sign-in

Admins sign in with the identity they already have — no separate eCardWidget password to manage or reset.

Self-maintaining directory

Joiners, movers, and leavers flow from your IdP into the recognition directory automatically.

Automations always aimed right

Synced birthdays and hire dates feed birthday and anniversary automations — no stale spreadsheet dates.

Why it works

Pair Okta with eCardWidget

Okta is already your source of truth for who works here. Point it at eCardWidget and it becomes the source of truth for who gets celebrated: assign a user in Okta and they're in the directory with their birthday and hire date armed for automations; deactivate them and the cards stop, instantly.

Protocol: OpenID Connect (authorization-code + PKCE) · Provisioning: SCIM 2.0 · How eCardWidget SSO & directory sync works

Example use case

A new hire is assigned to the eCardWidget app in Okta on day one → SCIM provisions them with their start date → eleven months later the 1-year anniversary automation fires a signed card from their manager — nobody touched a spreadsheet.

Directory chores: zero.

Setup guide

How to connect Okta and eCardWidget

1In the Okta Admin Console, create an OIDC Web App (choose OpenID Connect — not SAML) and grab the Client ID, Client Secret, and discovery URL.
2In eCardWidget, open Settings → SSO & Directory Sync, paste the three values, and verify your email domain with the DNS TXT record shown.
3Test the connection, then sign in from an incognito window to confirm SSO works end to end.
4Enable SCIM provisioning in Okta using the SCIM base URL and bearer token from eCardWidget.
5Map attributes (name, department, manager, birthday, hire date) and assign the users or groups you want in your recognition directory.

Full walkthrough with screenshots: Okta setup guide

Frequently asked

Okta + eCardWidget questions

Does this use SAML or OIDC?

OpenID Connect. When adding the app in Okta, pick the OIDC Web App type — eCardWidget doesn't support SAML. Okta's OIDC support is first-class, so setup is typically quicker than a SAML app anyway.

What does Okta SCIM provisioning sync?

Team members — the people you celebrate. Create, update (within about a minute), deactivate, and reactivate flow from Okta, including job title, department, manager, employee ID, hire date, and birthday (stored without birth year).

What happens when we offboard someone in Okta?

Their eCardWidget team-member record is disabled automatically — automations stop targeting them, and their history is preserved rather than deleted.

Which plan do I need?

SSO and SCIM are available on the Enterprise plan. Book a demo and we'll set it up with your Okta org.