> For the complete documentation index, see [llms.txt](https://doc.thordata.com/doc/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.thordata.com/doc/free-tools/sso/using-thordata-to-set-up-okta-sso.md).

# Using Thordata to set up Okta SSO

**Requirements:**

* An Okta organization account with administrator privileges.
* A Thordata account with administrator privileges.

**Steps:**

1. **Steps:**In your Okta Admin Dashboard, go to **Applications > Applications**.\
   (`https://[your_domain]-admin.okta.com/admin/apps/active`)
2. Click **Create App Integration**.

<div align="left"><figure><img src="/files/PEgGwNuUaaFXEXNrmWKN" alt="" width="563"><figcaption></figcaption></figure></div>

3. Select **OIDC - OpenID Connect** as the Sign-in method.
4. Choose **Web Application** as the Application type, then click **Next**.

<div align="left"><figure><img src="/files/T5NQdpBhpR3sfXxDCifF" alt="" width="563"><figcaption></figcaption></figure></div>

5. You will be redirected to a new Web App Integration page. Here, you can name your app integration (we recommend using "Thordata Control Panel").
6. Under **Grant type**, select **Implicit** and **Authorization Code** \[Optional].

<div align="left"><figure><img src="/files/C7BW460Cixb1dpwCAYke" alt="" width="563"><figcaption></figcaption></figure></div>

7. Go to the Thordata Control Panel.
8. Open the **OKTA Configuration** dialog.

<div align="left"><figure><img src="/files/bLgHpw8tdNfvfFIZWrm5" alt="" width="531"><figcaption></figcaption></figure></div>

9. Copy the **Sign-in redirect URI**.

<div align="left"><figure><img src="/files/2rxiGlyOy8QSAD6xAW64" alt="" width="563"><figcaption></figcaption></figure></div>

10. Paste it into the corresponding field in the new app settings in Okta.

<div align="left"><figure><img src="/files/rG3t1ZxHK8rl7HftvswN" alt="" width="563"><figcaption></figcaption></figure></div>

11. Repeat the same process for the **Sign-out URI**.
12. Under **Assignments**, select the desired access level.

<div align="left"><figure><img src="/files/PCRLL5I4B3y3FVC8t650" alt="" width="563"><figcaption></figcaption></figure></div>

13. Click **Save**.
14. You should now be on the settings page for the new app integration.

    Copy your **Client ID**, **Client Secret**, and **Okta Domain** to the OKTA settings dialog in the Thordata Control Panel.

<div align="left"><figure><img src="/files/AyUtiIKBvbzEryhxxBkE" alt="" width="545"><figcaption></figcaption></figure></div>

**Okta Domain：**

<div align="left"><figure><img src="/files/3CIkB8ifpj8Qta06Dx0q" alt="" width="512"><figcaption></figcaption></figure></div>

<div align="left"><figure><img src="/files/9AuqItLdXtxd6M27UNdJ" alt="" width="563"><figcaption></figcaption></figure></div>

15. You should go to Security-API-Tokens to create your token

<div><figure><img src="/files/EFQv1PFigFtqcQNzwXrB" alt="" width="563"><figcaption></figcaption></figure> <figure><img src="/files/RogHJEoporbyuTXv8rEo" alt="" width="563"><figcaption></figcaption></figure></div>

<div><figure><img src="/files/xhhxgshICBQ5Wm5pJIHs" alt="" width="563"><figcaption></figcaption></figure> <figure><img src="/files/uzQmaXs0w5IyEbD723Vb" alt="" width="563"><figcaption></figcaption></figure></div>

Then copy it into the OKTA settings dialog in the Thourdata control panel.

<div align="left"><figure><img src="/files/Wb80MgR5aZZDMxajO7Ik" alt="" width="563"><figcaption></figcaption></figure></div>

16. Click "Activate". If you select "Allow everyone access", skip step 17.
17. Click **Activate**. *(If you selected "Allow everyone access," skip step 16.)*
18. Go to the **Assignments** tab and assign the users permitted to use this integration.

<div align="left"><figure><img src="/files/gNO6M6j8TtsU0nWXwyct" alt="" width="563"><figcaption></figcaption></figure></div>

17. Go to the Thordata settings page and ensure all required users are displayed. *Note: We are currently working on providing user support – you should manage this manually for now.*

<div align="left"><figure><img src="/files/LSZv0jgRTgvuD8tQhTwy" alt="" width="563"><figcaption></figcaption></figure></div>

The following steps are optional. They enable your users to initiate authentication from their dashboard or the Okta Chrome extension.

18. Scroll down to **General Settings** and click **Edit**.
19. &#x20;Configure the following settings:\
    \* **Login initiated by:** Okta or App\
    \* **App visibility:** Display application icon to users\
    \* **Login flow:** Redirect to app to initiate login (OIDC compliant)

Copy the **Initiate login URI** from the Control Panel.

<div align="left"><figure><img src="/files/pMq6PMlpuf0KkZszaDyi" alt="" width="563"><figcaption></figcaption></figure></div>

<div align="left"><figure><img src="/files/gAMCsYlEjqajzDlinNvJ" alt="" width="563"><figcaption></figcaption></figure></div>

20. Save the changes. The integration is now ready.

**Important Notes:**

* The **Okta Domain** should be the one that appears in your app integration settings (e.g., `yourcompany.okta.com`), not the one you see as an administrator (e.g., `yourcompany-admin.okta.com`).
* Ensure the **credentials provided to Thordata are correct**, as we cannot verify them personally.
* The **Sign-in redirect URI is mandatory** for the SSO functionality to work.
* The **Initiate login URI is required** if you want to use the feature from the Okta Chrome extension or the Okta dashboard.