SSOOkta
Okta SSO Setup Guide
Configure SAML 2.0 Single Sign-On with Okta
⏱️ 10 min read•Last updated: December 2025
1Create a new application in Okta
- Log in to your Okta Admin Console
- Navigate to Applications → Applications
- Click Create App Integration
- Select SAML 2.0 and click Next
- Enter "ViksaAI" as the App name and click Next
2Configure SAML Settings
Enter the following values in the SAML Settings section:
| Single sign-on URL | https://api.viksaai.com/auth/auth/sso/saml/callback |
| Audience URI (SP Entity ID) | https://viksaai.com/saml/metadata |
| Name ID format | EmailAddress |
| Application username | Email |
3Configure Attribute Statements
Add the following attribute mappings for user provisioning:
| Name | Value |
|---|---|
email | user.email |
first_name | user.firstName |
last_name | user.lastName |
groups | (Groups attribute) |
Click Next and then Finish to create the application.
4Copy Okta SSO Settings
After creating the application, go to the Sign On tab and copy these values:
Important
Click "View SAML setup instructions" or go to the "Sign On" tab → "View IdP metadata" to find these values.
- Identity Provider Single Sign-On URL - This is your IdP SSO URL
- Identity Provider Issuer - This is your IdP Entity ID/Issuer
- X.509 Certificate - Download and copy the certificate contents
5Configure ViksaAI
- Go to Settings → SSO in your ViksaAI dashboard
- Select SAML 2.0 as the protocol
- Select Okta as the provider
- Enter your email domain (e.g.,
yourcompany.com) - Paste the IdP Entity ID/Issuer from Okta
- Paste the IdP SSO URL from Okta
- Paste the X.509 Certificate from Okta
- Click Save Configuration
6Verify Your Domain
Navigate to the Domain Verification tab and follow the instructions to add a DNS TXT record.
DNS Record Format
Type: TXT
Name: _viksaai-verification
Value: viksaai-verify=<your-token>
DNS changes may take up to 48 hours to propagate.
7Test and Enable SSO
- Click Test Connection to validate your configuration
- Assign users to the ViksaAI application in Okta
- Once verified, click Enable SSO
- Users can now sign in using "Sign in with SSO" on the login page
🎉 That's it! Your users can now sign in to ViksaAI using their Okta credentials.