How can I set up SSO for Okta (OAuth)?

What you'll learn in this article: If your company uses Okta as an identity provider, you can easily set up SSO on your own. Here's how.

Depending on the identity provider your company uses and which protocol you would like to use, you can configure SSO on your own. TravelPerk provides self-setup for Azure, G Suite, OneLogin, and Okta using OAuth. The rest of the identity providers will be configured using SAML.

Setting up a new application in your Okta account

1. From the Admin Dashboard, click on the Applications drop-down menu
2. Choose Applications
3. Click Add Application
4. 
5. Click on Create New App, this will launch the App Integration Wizard (AIW) that will allow you to create a custom app
6. On the Create a New Application (AIW), select OpenID Connect as Sign on method
7. Click on Create. This will create a new OpenID Connect integration
8. Enter the following:
   1. Application name: TravelPerk
   2. Application Logo: (Optional)
   3. Login redirect URIs: copy the login redirect URI from TravelPerk and paste it here
   4. Logout redirects URIs
9. Click Save. This will create a new **Client ID** and **Client secret** that you will need to copy into the TravelPerk integration

Keep in mind: Make sure users have access to this new application. Go to the Assignments tab and make sure the right People and Groups are added to it.

Setting up the new SSO  integration in your TravelPerk account

To configure a new SSO login, follow these steps:

1. Go to Company Settings > Integrations > SSO
2. Click on Setup
3. Click on Okta OAuth2 button. This will take you to the configuration of a new Okta integration.
4. Copy the Client ID and Client secret from your application
5. Paste the Client ID and Client secret on the SSO setup
6. Enter your company subdomain and press Authenticate
7. Authenticate using your Okta credentials
8. After signing in, your account will be linked and you will be taken to the SSO settings page on TravelPerk.
9. Additionally, you can automate the provisioning and management of the users from Okta: it is possible to create, manage, edit or delete users automatically from Okta. Follow these guidelines for more information!

To read about the available SSO options, go to this article: What SSO settings can I customize?

To know how to set up SSO for other identity providers with OAuth, you may refer to the articles below:

• How can I set up SSO for Azure (OAuth)?
• How can I set up SSO for G Suite (OAuth)? 
• How can I set up SSO for OneLogin (Oauth)?