> For the complete documentation index, see [llms.txt](https://help.dataimporter.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.dataimporter.io/security/single-sign-on-with-okta.md).

# Single Sign-On with Okta

Follow this guide to set up Single Sign-On (SSO) in Dataimporter with Okta. This will let you control which users have access to Dataimporter, restrict access to SSO, provision new users via Just-in-Time (JIT) provisioning.

## 1. Enable SSO in Dataimporter

1. In Dataimporter, head to the Account Settings page and toggle SSO on.

<figure><img src="/files/lw1GoWhPhqo8uRCBdr5W" alt=""><figcaption></figcaption></figure>

2. In the SAML Name field enter the name as you would like it to appear e.g. <mark style="color:blue;">`Acme`</mark>
3. In the Domain field enter your corporate company name e.g. <mark style="color:blue;">`acme.com`</mark>.
4. Keep this tab open and open another tab to perform the next steps.

## 2. Add Dataimporter to Okta

1. Log in to the Okta and click on Applications

![](/files/1uHjiuHoPHDZjAc2vNp3)

2. Click on Create App Integration.

<figure><img src="/files/BQfNpH9I5GUMHJ1N6CJW" alt=""><figcaption></figcaption></figure>

3. Select SAML 2.0 and click Next.

<figure><img src="/files/ow37cFzAPqRF185rt6W2" alt=""><figcaption></figcaption></figure>

4. Give the app the name <mark style="color:blue;">`DATAIMPORTER`</mark>, upload a Logo (optional), and click Next.

<figure><img src="/files/GrNWG7IrzrzwG3Tk2HH4" alt=""><figcaption></figcaption></figure>

5. In the Audience URI (SP Entity ID) field, add the value that you added in Step 2 of the Dataimporter configuration e.g. <mark style="color:blue;">`Acme`</mark>
6. In the Single sign-on URL section enter the URL in the following format https\://{instance}.dataimporter.io/saml/login/{identifier} e.g. <mark style="color:blue;">`https://app.dataimporter.io/saml/login/Acme`</mark>

<figure><img src="/files/h3vytm6HTJSouVMmO6Ow" alt=""><figcaption></figcaption></figure>

7. Make sure you Check the box for <mark style="color:blue;">`User this for Recipient URL and Destination URL`</mark>
8. Scroll down to Attribute Statements and populate the following values.

<figure><img src="/files/m4xtoheRFEUzXzh8XzYc" alt=""><figcaption></figcaption></figure>

9. Scroll to the bottom of the page and click <mark style="color:blue;">`Next`</mark>.
10. Under the Feedback section select the option <mark style="color:blue;">`I'm an Okta customer adding an internal app`</mark> and click the checkbox for <mark style="color:blue;">`This is an internal app that we have created`</mark>. Click <mark style="color:blue;">`Finish`</mark>.

<figure><img src="/files/lR8RtYEC0LtZrPkMLtSQ" alt=""><figcaption></figcaption></figure>

11. Click on <mark style="color:blue;">`Assignments`</mark> -> <mark style="color:blue;">`Assign`</mark> -> <mark style="color:blue;">`Assign to People`</mark>

12. Add any users who need access to Dataimporter.

<figure><img src="/files/ljHb2ZdPCVOadUvqP7OP" alt=""><figcaption></figcaption></figure>

13. Click back on the <mark style="color:blue;">`Sign On`</mark> tab and scroll down to the <mark style="color:blue;">`SAML Signing Certificates`</mark> section.
14. Click on <mark style="color:blue;">`Actions`</mark> next for the <mark style="color:blue;">`SHA-2`</mark> type, and click on <mark style="color:blue;">`Download Certificate.`</mark>
15. Click on <mark style="color:blue;">`View IdP metadata`</mark>

<figure><img src="/files/RNQrpJSgReC2FhrViHAU" alt=""><figcaption></figcaption></figure>

## 3. Configuring SSO in Dataimporter

1. Copy the <mark style="color:blue;">`entityId`</mark> value.

<figure><img src="/files/HSA0g0BBzIR79QRPWvgw" alt=""><figcaption></figcaption></figure>

2. Open the tab in Dataimporter and paste the value into the Provider Entity Id field.

<figure><img src="/files/ovEGnONqF9MxPtNP4bL0" alt=""><figcaption></figcaption></figure>

3. Open Okta and copy the Single Sign On Location value.

<figure><img src="/files/zDL5IK2HyMn6DbXLc2pt" alt=""><figcaption></figcaption></figure>

4. Open the tab in Dataimporter and paste the value into the Log In URL field.

<figure><img src="/files/qLGCIxvYtuwP96UY1Wl3" alt=""><figcaption></figcaption></figure>

5. Open the downloaded Certificate in a text editor and copy the entire value.
6. Open the tab in Dataimporter and paste the value into the X509 Certificate field.

<figure><img src="/files/BNQDfyjS3DuyD3CBwXMa" alt=""><figcaption></figcaption></figure>

7. Click on Save.
8. Contact Dataimporter Support to validate and enable SSO for your Organization.&#x20;