Okta

Allow users to sign in with Okta

Okta Integration

Okta integration enables you to leverage Okta’s enterprise identity management service for user authentication and management.

Prerequisites

  • Okta administrator account
  • Okta OpenID Connect application configured
  • SendAuth subdomain configured

Configuration Steps

1. Configure Okta OpenID Connect App

Create an OpenID Connect - Web Application in your Okta Admin Console.

The Okta application should provide the email attribute and be configured for your organization.

Name your application “SendAuth”.

For Sign-in redirect URIs, add your SendAuth callback URL: https://<your-subdomain>.app.sendauth.com/oauth/callback, replacing <your-subdomain> with the subdomain configured in your SendAuth account.

For Sign-out redirect URIs, add: https://<your-subdomain>.app.sendauth.com/logout

Under Assignments, ensure the application is assigned to the appropriate users or groups in your organization.

Click Save.

2. Gather Client Integration Information

On the application’s General tab, you’ll find copyable values for both Client ID and Client secret. You will need both values to configure Okta in SendAuth.

Note your Okta domain from your admin console URL (e.g., your-company.okta.com).

3. Set Up Identity Provider

In SendAuth, navigate to Settings, then click the Authentication tab. Set Use local authentication to Disabled.

Issuer will be in the format https://<your-okta-domain>/oauth2/default, substituting your Okta domain (e.g., your-company.okta.com) for <your-okta-domain>.

Client ID will be the Client ID from step 2.

Client Secret will be the Client secret from step 2.

Click Save.

Once configured, users who visit https://<your-subdomain>.app.sendauth.com will be redirected to your Okta sign-in page when they need to authenticate.