# Single Sign-On with Okta

Follow this guide to set up Single Sign-On (SSO) in Dataimporter with Okta. This will let you control which users have access to Dataimporter, restrict access to SSO, provision new users via Just-in-Time (JIT) provisioning.

## 1. Enable SSO in Dataimporter

1. In Dataimporter, head to the Account Settings page and toggle SSO on.

<figure><img src="/files/lw1GoWhPhqo8uRCBdr5W" alt=""><figcaption></figcaption></figure>

2. In the SAML Name field enter the name as you would like it to appear e.g. <mark style="color:blue;">`Acme`</mark>
3. In the Domain field enter your corporate company name e.g. <mark style="color:blue;">`acme.com`</mark>.
4. Keep this tab open and open another tab to perform the next steps.

## 2. Add Dataimporter to Okta

1. Log in to the Okta and click on Applications

![](/files/1uHjiuHoPHDZjAc2vNp3)

2. Click on Create App Integration.

<figure><img src="/files/BQfNpH9I5GUMHJ1N6CJW" alt=""><figcaption></figcaption></figure>

3. Select SAML 2.0 and click Next.

<figure><img src="/files/ow37cFzAPqRF185rt6W2" alt=""><figcaption></figcaption></figure>

4. Give the app the name <mark style="color:blue;">`DATAIMPORTER`</mark>, upload a Logo (optional), and click Next.

<figure><img src="/files/GrNWG7IrzrzwG3Tk2HH4" alt=""><figcaption></figcaption></figure>

5. In the Audience URI (SP Entity ID) field, add the value that you added in Step 2 of the Dataimporter configuration e.g. <mark style="color:blue;">`Acme`</mark>
6. In the Single sign-on URL section enter the URL in the following format https\://{instance}.dataimporter.io/saml/login/{identifier} e.g. <mark style="color:blue;">`https://app.dataimporter.io/saml/login/Acme`</mark>

<figure><img src="/files/h3vytm6HTJSouVMmO6Ow" alt=""><figcaption></figcaption></figure>

7. Make sure you Check the box for <mark style="color:blue;">`User this for Recipient URL and Destination URL`</mark>
8. Scroll down to Attribute Statements and populate the following values.

<figure><img src="/files/m4xtoheRFEUzXzh8XzYc" alt=""><figcaption></figcaption></figure>

9. Scroll to the bottom of the page and click <mark style="color:blue;">`Next`</mark>.
10. Under the Feedback section select the option <mark style="color:blue;">`I'm an Okta customer adding an internal app`</mark> and click the checkbox for <mark style="color:blue;">`This is an internal app that we have created`</mark>. Click <mark style="color:blue;">`Finish`</mark>.

<figure><img src="/files/lR8RtYEC0LtZrPkMLtSQ" alt=""><figcaption></figcaption></figure>

11. Click on <mark style="color:blue;">`Assignments`</mark> -> <mark style="color:blue;">`Assign`</mark> -> <mark style="color:blue;">`Assign to People`</mark>

12. Add any users who need access to Dataimporter.

<figure><img src="/files/ljHb2ZdPCVOadUvqP7OP" alt=""><figcaption></figcaption></figure>

13. Click back on the <mark style="color:blue;">`Sign On`</mark> tab and scroll down to the <mark style="color:blue;">`SAML Signing Certificates`</mark> section.
14. Click on <mark style="color:blue;">`Actions`</mark> next for the <mark style="color:blue;">`SHA-2`</mark> type, and click on <mark style="color:blue;">`Download Certificate.`</mark>
15. Click on <mark style="color:blue;">`View IdP metadata`</mark>

<figure><img src="/files/RNQrpJSgReC2FhrViHAU" alt=""><figcaption></figcaption></figure>

## 3. Configuring SSO in Dataimporter

1. Copy the <mark style="color:blue;">`entityId`</mark> value.

<figure><img src="/files/HSA0g0BBzIR79QRPWvgw" alt=""><figcaption></figcaption></figure>

2. Open the tab in Dataimporter and paste the value into the Provider Entity Id field.

<figure><img src="/files/ovEGnONqF9MxPtNP4bL0" alt=""><figcaption></figcaption></figure>

3. Open Okta and copy the Single Sign On Location value.

<figure><img src="/files/zDL5IK2HyMn6DbXLc2pt" alt=""><figcaption></figcaption></figure>

4. Open the tab in Dataimporter and paste the value into the Log In URL field.

<figure><img src="/files/qLGCIxvYtuwP96UY1Wl3" alt=""><figcaption></figcaption></figure>

5. Open the downloaded Certificate in a text editor and copy the entire value.
6. Open the tab in Dataimporter and paste the value into the X509 Certificate field.

<figure><img src="/files/BNQDfyjS3DuyD3CBwXMa" alt=""><figcaption></figcaption></figure>

7. Click on Save.
8. Contact Dataimporter Support to validate and enable SSO for your Organization.&#x20;


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.dataimporter.io/security/single-sign-on-with-okta.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.