# Okta configuration

{% hint style="info" %}
NOTE: You need to be an admin to do the following steps in Okta
{% endhint %}

* Login into Okta and go to **Applications** section in Admin Panel<br>

  <figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2FCDwat3YDEmNMbxXauumm%2FScreen_Shot_2023-01-19_at_11_23_54_AM.jpg?alt=media&#x26;token=7feb1e33-a710-48e4-962d-7981d62326ba" alt=""><figcaption></figcaption></figure>
* Create a new SAML 2.0 app\ <br>

  <figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2FDvgorn5yWnsGu9onQ3Zc%2FScreen_Shot_2023-01-19_at_11_27_34_AM.jpg?alt=media&#x26;token=037e1a9b-90a2-4e06-a3d8-756d60ad7bd7" alt=""><figcaption></figcaption></figure>

  <figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2FMVWW6cGrldH9gUj5IGIP%2FScreen_Shot_2023-01-19_at_11_27_46_AM.jpg?alt=media&#x26;token=86f297b3-3410-4ff5-b44b-c67a58f396ea" alt=""><figcaption></figcaption></figure>
* Choose an appropriate name for the app (for eg. **unSkript-sso**) and click **Next**

  <figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2FIjLscxdhc9zlyHadIcxO%2FScreen%20Shot%202023-01-19%20at%2011.31.00%20AM.png?alt=media&#x26;token=9aa2c24f-cb3c-4877-9a23-bc1fc49fa1ed" alt=""><figcaption></figcaption></figure>
* On the **Configure SAML** tab, please fill in the highlighted fields<br>

  <figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2F2Ebqx6jovCIBVuFt06qP%2FScreen_Shot_2023-01-19_at_11_33_03_AM.jpg?alt=media&#x26;token=daafaf10-3028-4717-b5a5-cc3e2f488005" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Please reach out to unSkript team at <support@unskript.com> for the values of the above fields.
{% endhint %}

* In the **Attribute statements** section of the form, please fill in the following 2 attributes<br>

  <figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2FGvaKS5ewpPMcdcozbSqg%2FScreen%20Shot%202023-01-19%20at%201.48.51%20PM.png?alt=media&#x26;token=e122d253-15b5-4081-8e58-c7aa8f058940" alt=""><figcaption></figcaption></figure>

  * The **name** attribute value will be  \
    `String.join(" ", user.firstName, user.lastName)`
  * The **email** attribute value will be **user.email** (Chose from the drop down)
  * Click **Next**
* On the **Feedback** page, please check the highlighted option and click **Finish**<br>

  <figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2FOUyygxmxLZqrfDUSbSsr%2FScreen_Shot_2023-01-19_at_2_12_58_PM.jpg?alt=media&#x26;token=50c14849-7396-468f-ae11-ee0146c28edc" alt=""><figcaption></figcaption></figure>
* Next, we will need the Single sign-on URL and x.509 certificate to configure the SP on our side.   Click on the highlighted button to get the above values<br>

  <figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2Fl0F44355CWE0jM70svWe%2FScreen_Shot_2023-01-19_at_2_17_04_PM.jpg?alt=media&#x26;token=54e076b0-c12d-430b-b0f3-897ee3c26a68" alt=""><figcaption></figcaption></figure>
* Copy **Identity Provider Single Sign-On URL** and also download the certificate as highlighted below<br>

  <figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2Fw7EiJXkgbeDg4NT30QFr%2FScreen_Shot_2023-01-19_at_2_24_45_PM.jpg?alt=media&#x26;token=15ee9700-e9f0-4914-9b7f-68c62ee25e5a" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Please send the above 2 piece of information to <support@unskript.com>
{% endhint %}

* Assign users to this new application, so that sign in into unSkript application using Okta SSO. Click on **Assignments** tab to accomplish this.<br>

  <figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2F01gxXugWnltBikHeJMfw%2FScreen_Shot_2023-01-19_at_2_29_28_PM.jpg?alt=media&#x26;token=169a7a9f-c0ea-4cd1-9af1-e0c576f5da21" alt=""><figcaption></figcaption></figure>
