--- title: "SSO and SCIM Configuration for Okta" slug: "sso-and-scim-configuration-for-okta" description: "This guide lists the actions you need to complete to configure SSO and SCIM for Okta." updated: 2026-01-11T11:02:33Z published: 2026-01-11T11:02:33Z canonical: "academy.insiderone.com/sso-and-scim-configuration-for-okta" --- > ## Documentation Index > Fetch the complete documentation index at: https://academy.insiderone.com/llms.txt > Use this file to discover all available pages before exploring further. # SSO and SCIM Configuration for Okta > **Suggested reading:** [Single Sign-On](https://academy.useinsider.com/docs/single-sign-on) This guide lists the actions you need to complete to configure SSO (Single Sign-On) and SCIM (System for Cross-Domain Identity Management) for Okta. You can complete this configuration in the following steps: - [Set up SSO](/docs/sso-and-scim-configuration-for-okta#set-up-sso) - [Add more users to IdP](/docs/sso-and-scim-configuration-for-okta#add-more-users-to-the-idp-identity-provider) - [Set up SCIM](/docs/sso-and-scim-configuration-for-okta#set-up-scim) ## Set up SSO 1. Log in to your **Okta** account, and go to **Applications** to click the **Create App Integration** button. ![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/06a52d8d-2255-40a0-99c2-1237d5657a6a.png) 2. Fill in the App name input as displayed, and click the **Next** button. ![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/a4d12360-0573-4ddd-93b8-fb527dad14a4.png) 3. Choose **SAML 2.0** and click the **Next** button. ![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/image%20(2)(1).webp) 4. Fill the SAML Settings fields with the following information. | Field | Information | | --- | --- | | **Single sign-on URL** | **Insider SSO URL** on Inone Settings > [Security](/v1/docs/security-settings) | | **Use this for Recipient URL and Destination URL** | - | | **Audience URI (SP Entity Id)** | **Service Provider Entity ID** on Inone Settings > [Security](/v1/docs/security-settings) | | **Default Relay State** | empty | | **Name ID Format** | **EmailAddress** | | **Application username** | **Email** | | **Update application username on** | **Create and update** | ![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/okta%20create.webp) 5. After filling the fields, click the **Next** button at the bottom of the page to save your changes. 6. Select the **I’m an Okta customer adding an internal app** option.**![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/okta%20internal%20app.webp)** 7. Other fields in this section are optional. You can skip them and click the **Next** button at the bottom of the page to finalize your setup. 8. Go to **Applications > Assignments** to click the **Assign** button. Select the **People** Filter. ![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/okta%20assign.webp) 9. You’ll see your account name and email. Click the **Assign** button to add this user to the application you created so they can log in.![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/okta%209.webp) 10. Go to the **Sign On** tab to copy the **Metadata URL**, and paste it in a new tab in your browser.![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/okta%2010.webp) 11. You’ll see an **XML file/code.** If the XML file does not download manually, click **CTRL+S (CMD+S)** and save the file as a **metada.xml** file. 12. Go back to **Inone panel > Settings > Inone Settings > Security** to upload the XML file you’ve downloaded, and click the **Test Connection** button. ![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/image-1710415516194.png) 13. You should see a green text that indicates the test connection is successful. Save the settings, and your SSO setup is ready. If you see an error during or after testing your connection, you can refer to [Troubleshooting SSO Errors](/v1/docs/troubleshooting-sso-errors) to see the possible errors and their solutions. ## Add more users to the IdP (Identity Provider) You can log in via the email address and password you use to log in to Okta’s dashboard. To test other functionalities, you might need to add another user to the IdP. Follow these steps to add your users. 1. Go to **Directory > People** and click the **Add Person** button. ![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/Screenshot%202023-03-27%20at%2019.45.38.png) 2. Fill out all the fields and click the **Save** button. ![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/adim7.png) 3. Go back to **Applications**, choose the application you created, and navigate to the **Assignments** tab. 4. Click the **Assign** and the **Assign to People** button.![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/people.webp) 5. Choose the person you just created and click the **Assign** button.![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/people%20assign.webp) Finally, you can log in with the user you created. To test it, you can open a new incognito tab on your browser and go to [Insider's Log In with SSO](https://inone.useinsider.com/sso/login). Type in your Workplace ID, and click the **Login** button. You will be redirected to Okta’s login page. Enter your new user credentials to log in via that user. ## Set up SCIM > Refer to [Single Sign-On](/v1/docs/single-sign-on) for further information on System for Cross domain Identity Management (SCIM). 1. Go to **Applications > Insider > General**, click the **Edit** button, and check **the Enable SCIM Provisioning** box.![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/Screenshot%202023-06-20%20at%2015.08.20.png) 2. Once you enable it, you’ll see a new tab called **Provisioning**. Click the **Edit** button on the **Provisioning** tab.![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/Screenshot%202023-06-20%20at%2015.09.30.png) 3. Fill out the form with the following information, and click the **Save** button to save the settings.![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/061754ac-983f-417c-abc6-3cf45e249098.png) | Field | Information | | --- | --- | | **SCIM connector base URL** | Copy and paste the base URL on **Inone Settings > Security** | | **Unique identifier field for users** | **userName** | | **Supported provisioning actions** | Select all except the **Import Groups** option | | **Authentication Mode** | **HTTP Header** | | **Authorization** | Copy and paste your **SCIM API Token** generated from the **Inone Settings** page. | 4. Once you fill out the form, click the **Test Connector Configuration** button to make sure everything is fine, and click the **Save** button to save the settings. 5. After you save the settings, under the same **Provisioning** tab, click the **To App** button on the left menu and enable the following settings: **Create Users**, **Update User Attributes**, and **Deactivate Users**, and save the settings.![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/Screenshot%202023-06-21%20at%2012.14.12.png) 6. You should create User groups to map roles between Okta and Inone Panel. ![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/Screenshot%202023-06-21%20at%2012.26.15.png) Please create groups as described below. | Name | Description | | --- | --- | | Insider Manage Users | Administrator role for Insider One | | Insider Edit And Publish | Editor role for Insider One | | Insider Collaborate | Collaborator role for Insider One | | Insider View Only | Viewer role for Insider One | | Insider Change Campaign Status Only | Campaign Status Updater role for Insider One | | Insider Outsource | Outsourcer role for Insider One | You can put users in these groups to sync roles between Okta and Inone. If you don’t set a user role for a user or a group, they will be assigned the **View Only** role by default. 7. Finally, add these groups to the Insider application and start syncing. To assign the new groups to our **Application**, open the **Assignments** tab in the application page, click the **Assign** and the **Assign to Groups** button, and select all groups created before.![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/Screenshot%202023-06-21%20at%2012.33.45.png) 8. Under the **Push Groups** tab, click the **Push Groups > Find groups by name.**![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/Screenshot%202023-06-21%20at%2012.37.58.png) 9. On the following page, search for the group name that you recently created and check the **Push group membership immediately** box. Once you select the group in the first input, write the exact name for the second input as well. Finally, click the **Save & Add Another** button, then repeat the same steps for each group you created.![](https://cdn.document360.io/c6df4583-da94-4cb2-bb8a-be0cbdd11109/Images/Documentation/Screenshot%202023-06-21%20at%2012.40.25.png) ## Related - [Single Sign-On (SSO)](/single-sign-on.md) - [Troubleshooting SSO Errors](/troubleshooting-sso-errors.md)