> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.noticeable.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# How to Configure Okta Single Sign-On with OIDC?

# Configuring Okta Single Sign-On with OpenID Connect

Okta is an identity and access management platform. Its SSO solution allows users to log into a variety of systems using one centralized process. This configuration guide explains how to link Noticeable with Okta for Single Sign-On using OpenID Connect (OIDC).

## Contents

* [Supported Features](/en-us/article/how-to-configure-okta-single-sign-on-with-oidc-uvtopa/#2-supported-features)
* [Requirements](/en-us/article/how-to-configure-okta-single-sign-on-with-oidc-uvtopa/#2-requirements)
* [Configuration Steps](/en-us/article/how-to-configure-okta-single-sign-on-with-oidc-uvtopa/#2-configuration-steps)
* [Notes](/en-us/article/how-to-configure-okta-single-sign-on-with-oidc-uvtopa/#2-notes)
* [Known Issues/Troubleshooting](/en-us/article/how-to-configure-okta-single-sign-on-with-oidc-uvtopa/#2-known-issuestroubleshooting)

## Supported Features

* Service Provider-initiated login - We do not support IdP-initiated login for now.
* Just-in-Time account creation - Provision new Noticeable accounts for team members without existing access, upon their first SSO sign-in.
* Automatic projects and role assignation upon account creation: configure whether new Noticeable accounts get access to existing projects and what role they should be assigned to.

## Requirements

You need to upgrade to our Enterprise plan to enable Single Sign-On.

## Configuration Steps

1. Log in to your Okta account and navigate to the **Admin** dashboard.

2. From the **Applications** menu on the left, select **Applications**.

3. The Applications page is displayed. Click on the button **Add Application**:

![](https://storage.crisp.chat/users/helpdesk/website/55d6234c11240c00/screenshot-from-2021-02-12-11-_1qe0k2z.png)

4. The Okta catalog is displayed. In the **Search** field enters **Noticeable** and click on the corresponding entry that appears in the dropdown list.

5. At this stage you should see the Noticeable app page description with supported capabilities. Click on the **Add** button.

6. General settings for the Noticeable app are displayed. Use the default application label or enter a custom one. For **Application visibility**, we suggest checking the options **Do not display application icon to users** and **Do not display application icon in the Okta Mobile app** since Noticeable supports SP initiated login only. Then, click **Next**.

7. The *Sign-On Options* appear. Select **Open ID Connect** as sign on method and click **Done**:

![](https://storage.crisp.chat/users/helpdesk/website/55d6234c11240c00/screenshot-from-2021-05-06-22-_1lnma0j.png)

8. The configured Noticeable application opens on the **Assignments** tab. Use the **Assign** dropdown button to add new people or group of people who will be allowed to connect to Noticeable via Okta.

9. Click on **Sign On** in the app menu bar. Copy the value associated with the field **Client ID**. We'll respectively refer to this value as your Okta Client ID when configuring your integration on the Noticeable dashboard just after.

## Configuring Noticeable

At this stage, you should have an application dedicated to Noticeable configured on Okta. The integration with Noticeable works in 2 steps. First, you need to create a connection. Second, you have to link the company domain that users use in their email address to sign in. Based on the domain your configure, when a user enters his email address, we know what SSO connection to use.

### Creating a connection

1. Open the [Noticeable dashboard](https://dashboard.noticeable.io).

2. From the left menu, click on **Integrations**. A page that lists available integrations appears.

3. Locate the _Single Sign-On_ integration and click on **Configure**. The configuration page is displayed.

4. Click the **Add New** button on the top right side, then **Connection** in the dropdown that appears. A form to configure a new connection is shown.

5. Enter a name in the first input field, for instance **Okta**. 

6. As connection type select **OIDC**. 

7. As **Client ID**, enter the Okta client ID value you copied while applying the Okta configuration steps.

8. For the **Issuer URL** value, you can find the exact value on the Okta dashboard. Select **Security**, **API**. Under **Authorization Servers**, identify the authorization server to use and copy the value for **Issuer URI**:

![](https://storage.crisp.chat/users/helpdesk/website/55d6234c11240c00/screenshot-from-2021-02-12-15-_952aha.png)

9. Select what action to perform **Upon Account Creation**. By default, when a user from your organization signs in for the first time, an account is automatically created on Noticeable but the user is only assigned as a member of your Noticeable organization. No project access is given. The _Upon Account Creation_ option allows giving access to existing projects to new users without having to send invitations manually for each project under your organization.

![](https://storage.crisp.chat/users/helpdesk/website/55d6234c11240c00/screenshot-from-2020-12-14-00-_1nrxr82.png)

10. Click **Create**. Your connection is created!

| Noticeable supports multiple connections so that if you need to switch between 2 Identity Providers, you can do it without any interruptions.

### Creating and linking a domain

The last configuration consists in linking your company domain (the one used by users to sign-in) with the connection created in the previous section.

1. Click the **Add New** button on the top right side, then **Domain** in the dropdown that appears. A dialog to link a new domain is shown.
2. In the **Domain name** field, enter your company domain, for example `acme.com`. The domain to specify is the domain users will use in their email address in order to sign-in.
3. In the **Link with connection** dropdown, select the connection to link this domain with. If you followed the steps, the connection should be named _Okta_.

![](https://storage.crisp.chat/users/helpdesk/website/55d6234c11240c00/screenshot-from-2020-12-14-01-_1l3nr5n.png)

4. Click **Link**. A new dialog appears. It asks to setup a TXT DNS record to prove that you own the domain. 

![](https://storage.crisp.chat/users/helpdesk/website/55d6234c11240c00/screenshot-from-2020-12-14-01-_1snz7t0.png)

5. Complete the DNS configuration and click **Verify**.
6. That's it. Your domain is verified and linked. You can use SSO to sign-in to Noticeable 🎉 

Read our [SCIM configuration guide](/en-us/article/how-to-support-account-deactivation-with-okta-197agjs/) if you need to support deactivation/reactivation.

## Notes

To start authentication, open the [Noticeable dashboard](https://dashboard.noticeable.io), click to **Use single sign-on (SSO) instead**, enter your company email and select **Continue with SSO**.

## Known Issues/Troubleshooting

N/A