# Using Thordata to set up Okta SSO

**Requirements:**

* An Okta organization account with administrator privileges.
* A Thordata account with administrator privileges.

**Steps:**

1. **Steps:**In your Okta Admin Dashboard, go to **Applications > Applications**.\
   (`https://[your_domain]-admin.okta.com/admin/apps/active`)
2. Click **Create App Integration**.

<div align="left"><figure><img src="/files/PEgGwNuUaaFXEXNrmWKN" alt="" width="563"><figcaption></figcaption></figure></div>

3. Select **OIDC - OpenID Connect** as the Sign-in method.
4. Choose **Web Application** as the Application type, then click **Next**.

<div align="left"><figure><img src="/files/T5NQdpBhpR3sfXxDCifF" alt="" width="563"><figcaption></figcaption></figure></div>

5. You will be redirected to a new Web App Integration page. Here, you can name your app integration (we recommend using "Thordata Control Panel").
6. Under **Grant type**, select **Implicit** and **Authorization Code** \[Optional].

<div align="left"><figure><img src="/files/C7BW460Cixb1dpwCAYke" alt="" width="563"><figcaption></figcaption></figure></div>

7. Go to the Thordata Control Panel.
8. Open the **OKTA Configuration** dialog.

<div align="left"><figure><img src="/files/bLgHpw8tdNfvfFIZWrm5" alt="" width="531"><figcaption></figcaption></figure></div>

9. Copy the **Sign-in redirect URI**.

<div align="left"><figure><img src="/files/2rxiGlyOy8QSAD6xAW64" alt="" width="563"><figcaption></figcaption></figure></div>

10. Paste it into the corresponding field in the new app settings in Okta.

<div align="left"><figure><img src="/files/rG3t1ZxHK8rl7HftvswN" alt="" width="563"><figcaption></figcaption></figure></div>

11. Repeat the same process for the **Sign-out URI**.
12. Under **Assignments**, select the desired access level.

<div align="left"><figure><img src="/files/PCRLL5I4B3y3FVC8t650" alt="" width="563"><figcaption></figcaption></figure></div>

13. Click **Save**.
14. You should now be on the settings page for the new app integration.

    Copy your **Client ID**, **Client Secret**, and **Okta Domain** to the OKTA settings dialog in the Thordata Control Panel.

<div align="left"><figure><img src="/files/AyUtiIKBvbzEryhxxBkE" alt="" width="545"><figcaption></figcaption></figure></div>

**Okta Domain：**

<div align="left"><figure><img src="/files/3CIkB8ifpj8Qta06Dx0q" alt="" width="512"><figcaption></figcaption></figure></div>

<div align="left"><figure><img src="/files/9AuqItLdXtxd6M27UNdJ" alt="" width="563"><figcaption></figcaption></figure></div>

15. You should go to Security-API-Tokens to create your token

<div><figure><img src="/files/EFQv1PFigFtqcQNzwXrB" alt="" width="563"><figcaption></figcaption></figure> <figure><img src="/files/RogHJEoporbyuTXv8rEo" alt="" width="563"><figcaption></figcaption></figure></div>

<div><figure><img src="/files/xhhxgshICBQ5Wm5pJIHs" alt="" width="563"><figcaption></figcaption></figure> <figure><img src="/files/uzQmaXs0w5IyEbD723Vb" alt="" width="563"><figcaption></figcaption></figure></div>

Then copy it into the OKTA settings dialog in the Thourdata control panel.

<div align="left"><figure><img src="/files/Wb80MgR5aZZDMxajO7Ik" alt="" width="563"><figcaption></figcaption></figure></div>

16. Click "Activate". If you select "Allow everyone access", skip step 17.
17. Click **Activate**. *(If you selected "Allow everyone access," skip step 16.)*
18. Go to the **Assignments** tab and assign the users permitted to use this integration.

<div align="left"><figure><img src="/files/gNO6M6j8TtsU0nWXwyct" alt="" width="563"><figcaption></figcaption></figure></div>

17. Go to the Thordata settings page and ensure all required users are displayed. *Note: We are currently working on providing user support – you should manage this manually for now.*

<div align="left"><figure><img src="/files/LSZv0jgRTgvuD8tQhTwy" alt="" width="563"><figcaption></figcaption></figure></div>

The following steps are optional. They enable your users to initiate authentication from their dashboard or the Okta Chrome extension.

18. Scroll down to **General Settings** and click **Edit**.
19. &#x20;Configure the following settings:\
    \* **Login initiated by:** Okta or App\
    \* **App visibility:** Display application icon to users\
    \* **Login flow:** Redirect to app to initiate login (OIDC compliant)

Copy the **Initiate login URI** from the Control Panel.

<div align="left"><figure><img src="/files/pMq6PMlpuf0KkZszaDyi" alt="" width="563"><figcaption></figcaption></figure></div>

<div align="left"><figure><img src="/files/gAMCsYlEjqajzDlinNvJ" alt="" width="563"><figcaption></figcaption></figure></div>

20. Save the changes. The integration is now ready.

**Important Notes:**

* The **Okta Domain** should be the one that appears in your app integration settings (e.g., `yourcompany.okta.com`), not the one you see as an administrator (e.g., `yourcompany-admin.okta.com`).
* Ensure the **credentials provided to Thordata are correct**, as we cannot verify them personally.
* The **Sign-in redirect URI is mandatory** for the SSO functionality to work.
* The **Initiate login URI is required** if you want to use the feature from the Okta Chrome extension or the Okta dashboard.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://doc.thordata.com/doc/free-tools/sso/using-thordata-to-set-up-okta-sso.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.