> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getstrada.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SSO with Okta

> Configure Single Sign-On using Okta for seamless authentication

<Note>
  **Contact Strada Administrator Required**

  To set up SSO with Okta, please contact your Strada administrator. Our team will provide you with the necessary SAML configuration URLs. After you complete the Okta configuration steps below, you'll need to send us your Okta metadata URL in the format specified in this guide.
</Note>

## Overview

Strada supports Single Sign-On (SSO) through Okta, allowing your organization to manage user access centrally through your existing Okta identity provider. This enables secure and streamlined authentication for your team members.

***

## Prerequisites

Before configuring SSO, ensure you have:

* Admin access to your Okta organization
* Contact with your Strada administrator
* The SAML configuration URLs provided by Strada

***

## Step 1: Receive Configuration from Strada

Contact your Strada administrator to receive:

1. **Single sign-on URL** (ACS URL)
2. **Audience URI** (SP Entity ID)

Keep these URLs handy for the next step.

***

## Step 2: Configure Strada Application in Okta

### Create SAML 2.0 Application

1. Log in to your Okta Admin Console
2. Navigate to **Applications** > **Applications**
3. Click **Create App Integration**
4. Select **SAML 2.0** as the sign-in method
5. Click **Next**

### General Settings

1. **App name**: Enter "Strada"
2. **App logo**: <a href="/get-started/login/strada-logo.png" download="strada-logo.png">Download Strada logo</a> and upload it to the application
3. Click **Next**

### SAML Settings

Configure the following SAML settings using the URLs provided by Strada:

**Single sign-on URL:**

```
[URL provided by Strada administrator]
```

**Audience URI (SP Entity ID):**

```
[URL provided by Strada administrator]
```

**Name ID format:** Select `EmailAddress`

**Application username:** Select `Email`

<img src="https://mintcdn.com/strada/teLvLPIx67-z9yzH/get-started/login/Okta_SAML_Settings.png?fit=max&auto=format&n=teLvLPIx67-z9yzH&q=85&s=73713c156facd53e0989440cdaf86e70" alt="SAML Settings Configuration" width="722" height="597" data-path="get-started/login/Okta_SAML_Settings.png" />

**Attribute Statements** (required):

| Name      | Name Format | Value          |
| --------- | ----------- | -------------- |
| email     | Basic       | user.email     |
| firstName | Basic       | user.firstName |
| lastName  | Basic       | user.lastName  |

<img src="https://mintcdn.com/strada/teLvLPIx67-z9yzH/get-started/login/Okta_SAML_Attribute_Statements.png?fit=max&auto=format&n=teLvLPIx67-z9yzH&q=85&s=ab0c553314f0c4a47ad93d58b44b9e4f" alt="Attribute Statements Configuration" width="736" height="392" data-path="get-started/login/Okta_SAML_Attribute_Statements.png" />

Click **Next** to proceed.

### Feedback Section

On the next screen (Section 3), Okta will ask for feedback about your app integration. You can select any option here (e.g., "I'm an Okta customer adding an internal app") and proceed - this section is optional and won't affect your SSO configuration.

Click **Finish** to complete the application setup.

***

## Step 3: Assign Users in Okta

### Add Users to Application

1. In your Strada application, navigate to the **Assignments** tab
2. Click **Assign** > **Assign to People** or **Assign to Groups**
3. Select the users or groups who should have access to Strada
4. Click **Assign** and then **Done**

***

## Step 4: Provide Metadata to Strada

### Obtain Okta Metadata URL

After completing your Strada application setup:

1. In your Strada application, navigate to the **Sign On** tab
2. Scroll to the **SAML 2.0** section
3. Locate the **Metadata URL** (it should look like: `https://your-domain.okta.com/app/exkxxxx/sso/saml/metadata`)
4. Copy this URL

<img src="https://mintcdn.com/strada/teLvLPIx67-z9yzH/get-started/login/Okta_SAML_Sign_in_Metadata.png?fit=max&auto=format&n=teLvLPIx67-z9yzH&q=85&s=e5741f57d50d81de39549cd079fdb1eb" alt="Metadata URL Location" width="749" height="700" data-path="get-started/login/Okta_SAML_Sign_in_Metadata.png" />

### Send to Strada

Share the metadata URL with your Strada administrator along with your organization name.

Strada will complete the SSO configuration on their end and notify you when it's ready for testing.

***

## Step 5: Test SSO Connection

Once Strada confirms the configuration is complete:

1. Navigate to your Strada login page
2. Click **Sign in with SSO**
3. You should be redirected to Okta for authentication
4. After successful authentication, you'll be redirected back to Strada

If you encounter any issues during login, contact your Strada administrator.
