> ## Documentation Index
> Fetch the complete documentation index at: https://ona.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta

You can set up Single Sign-on (SSO) with Okta for your team.

This section helps you to create an OIDC application with Okta. The *Client ID*, *Client Secret*, and *Issuer URL* of this OIDC application are required to setup SSO in Ona. See the [step-by-step guide](/ona/sso/overview#setting-up-single-sign-on) for the general instructions.

## Prerequisites

As prerequisites you will need the following:

* Access to your Okta instance
* Permission to create an [app integration](https://help.okta.com/oie/en-us/Content/Topics/Apps/apps-overview-get-started.htm)

## Create an OIDC application

1. On the Okta Admin dashboard, navigate to **Applications**.

2. Select **Create App Integration**.

3. Select the following options and click **Next**:

   * Sign-in method: `OIDC - Open ID Connect`
   * Application type: `Web Application`

4. Specify General Settings

   * App integration name, e.g. `Ona`
   * Sign-in redirect URIs: `https://app.gitpod.io/auth/oidc/callback`
   * Sign-out redirect URIs: `none`

5. Assignments

   * Select Okta users or groups which would be allowed to use the integration with Ona.
   * Okta lets you [import and synchronize directories](https://help.okta.com/oie/en-us/content/topics/directory/directory-integrations-main.htm?cshid=csh-directory-integrations-main), which then can be assigned to use the integration.

6. Obtain *Client ID* and *Client Secret* from the **General** tab.

7. Obtain *Issuer URL*

   * Navigate to *Security > API* in the Okta Admin dashboard.
   * Copy the **Issuer URI** of the authorization server you want to use.

8. Continue with the SSO configuration in Ona: [Clicking *Save & Test*](/ona/sso/overview#setting-up-single-sign-on)