# Okta SSO Integration

Squadcast supports SAML 2.0-based Okta Single Sign-On (SSO) login and you can set it for your organisation by following this integration guide.

### Pre-requisites <a href="#pre-requisites" id="pre-requisites"></a>

1. Valid Okta SSO account & subscription
2. Account Owner / Administrator account in Squadcast

{% hint style="info" %}
**Points to Note:**

1\. Only an Administrator / Account owner can enable and configure Okta SSO for an organisation in Squadcast.\
\
2\. Once enabled, only the Account owner can use email-password-based login by default although it can be configured to enable email-based login for Administrators as well.
{% endhint %}

{% hint style="warning" %}
**Note for Mobile App Users:**

Check out this [<mark style="color:blue;">documentation</mark>](https://support.squadcast.com/~/changes/lGFY3mJPy207GveiFTeX/mobile-app/using-the-mobile-app) to log in to your Squadcast Mobile application.
{% endhint %}

### Setting up Okta SSO <a href="#setting-up-okta-sso" id="setting-up-okta-sso"></a>

1. Login to <mark style="color:red;">`app.squadcast.com`</mark> and navigate to the **Settings** > **Extensions**. Click the **Configure** button under SSO.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2F2kCrBFqSMWqQM77fwBSD%2Fokta_sso_gb_1.png?alt=media\&token=0abc531a-5803-4f62-b5dd-3b5f53cfcd00)

2\. In the opened modal, select the **Okta** tab and click **Show configuration guide for Okta**.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2FRrPkPVhpnfrA5mcCgGH9%2Fokta_sso_gb_2.png?alt=media\&token=8d449d26-720b-45bf-aad0-70a324a1cde8)

3\. Copy the ID highlighted in the instructions.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2F7gt2H6CFciBGbKgZX6r7%2Fokta_sso_gb_3.png?alt=media\&token=9ab0aac6-2f6a-4475-b720-ff2d82457427)

4\. Move to your Okta Dashboard and navigate to **Applications**

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-b3e1e6d15b51646ce150c925073cd8009f34e850%2Fokta_4.png?alt=media)

5\. Search for the **Squadcast** application and click **Add** to add it to your Okta account.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-e4256d9b5568ebcb0356a4673da0f1b4582f6bba%2Fokta_5.png?alt=media)

6\. Under the <mark style="color:red;">`Sign-On`</mark> tab, navigate to the <mark style="color:red;">`Advanced Sign-On Settings`</mark> and paste the Customer ID that was copied in Step 3 in the <mark style="color:red;">`Customer ID`</mark> field.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2FydarPuSV8aaeDLaNVlY9%2Fokta_sso_gb_5.png?alt=media\&token=2bfa3a74-f3e9-42ad-b6f6-7d74c8b27a37)

7\. Now click on <mark style="color:red;">`View Setup Instructions`</mark> to view the SAML 2.0 Endpoint and X.509 Certificate.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2FKVUsKRozAPOHRkWkj5ML%2Fokta_sso_gb_6.png?alt=media\&token=1309ec24-dcc3-472d-ba0f-cf778f71435d)

8\. Paste the SAML 2.0 Endpoint and X.509 Certificates in the respective fields in Squadcast

{% hint style="info" %}
**Note:**

Make sure to add the **Domain Name** of your Organization, for SSO login to work
{% endhint %}

<div><figure><img src="https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2FfLRDqgfOPJ54JuSAT6mz%2Fokta_sso_gb_7.png?alt=media&#x26;token=8bc2161f-1072-42bd-acab-5ed23f6cfd62" alt=""><figcaption></figcaption></figure> <figure><img src="https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2F0GGCoAXjO6I2AdHZjLX1%2Fokta_sso_gb_8.png?alt=media&#x26;token=4ed00213-ff20-400a-9bd8-68382892caec" alt=""><figcaption></figcaption></figure></div>

9\. In Squadcast, enable the toggle above within the modal and click on <mark style="color:red;">`Save`</mark> to enable Okta SSO for your Squadcast Account.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2F9LGK5LhbRfwrOkh34MXZ%2Fokta_sso_gb_9.png?alt=media\&token=12de2d4b-b882-4272-8882-f06536a48b6e)

{% hint style="info" %}
**Note**

You can turn On / Off Okta SSO by toggling the button at the top. Configure other options like the default User role and click Save.
{% endhint %}

{% hint style="warning" %}
**Important**

Members trying to log into Squadcast through SSO who aren't already added to the Squadcast platform will be added to the platform by default as **Users**.
{% endhint %}

10\. The Okta-Squadcast integration also supports user provisioning. To enable that, you can navigate to the <mark style="color:red;">`Assignments`</mark> tab, and assign this to <mark style="color:red;">`people`</mark> or <mark style="color:red;">`groups`</mark> (based on your requirement) to enable access to Squadcast.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2FOYbnIWCfk1y010g3IViX%2Fokta_sso_gb_10.png?alt=media\&token=be8f149b-7a22-46cf-9614-8b8b52a1789a)

In this example, we have chosen <mark style="color:red;">`Assign to People`</mark> and added a user as shown below.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2FGW1SoTY2DsbzfL7jlGa0%2Fokta_sso_gb_11.png?alt=media\&token=f4912310-d167-4147-b4ce-3d33cbfbd779)

11\. By default, the SSO provider will send Firstname, Lastname and Email ID to Squadcast. If you can send an optional custom key called <mark style="color:red;">`role`</mark> with one of these values <mark style="color:red;">`Admin`</mark>, <mark style="color:red;">`User`</mark> and <mark style="color:red;">`Stakeholder`</mark>, the user will be created with these roles instead of the default user role configured in the SSO modal in Squadcast.

Your Okta SSO Integration is good to go and anyone in your organisation can now use Okta SSO to login into Squadcast.

### Logging into Squadcast via Okta <a href="#logging-into-squadcast-via-okta" id="logging-into-squadcast-via-okta"></a>

1. You can log in to Squadcast by navigating to <mark style="color:red;">`My Apps`</mark> in your Okta Dashboard.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-8d38d12a65adbe8990d264c5a5794ef9c52d7bd4%2Fokta_12.png?alt=media)

2\. Find <mark style="color:red;">`Squadcast`</mark> in this list of saved applications and just click on the <mark style="color:red;">`Squadcast`</mark> card and you will be automatically directed to your Squadcast account.

![](https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2FfIf4jAjhhglYlQbtCBB4%2Fokta_sso_gb_12.png?alt=media\&token=6d5efe45-c796-432c-b053-baf0510bbf81)