> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/system-management/settings/single-sign-on-sso/okta-sso.md).
# Okta SSO
Okta single sign-on (SSO) manages and secures user authentication into applications, so there's no need to maintain user names and passwords for logging into DoControl.
Using Okta also significantly reduces the risk of access credentials being lost or stolen, ensuring optimal security when using DoControl.
To integrate DoControl with Okta SSO, you need to:
1. [Set up Okta](#prerequisites)
2. [Connect DoControl to Okta](#connect-docontrol-to-okta)
3. Optional: [Set up Okta bookmark app](#set-up-okta-bookmark-app)
{% hint style="warning" %}
Login via DoControl ensures full enforcement of Okta policies (such as multi-factor authentication).
Note that DoControl supports only Service Provider initiated SSO (through DoControl's login page). To use IdP initiated SSO via the Okta dashboard, you can [set up a bookmark app in Okta](#set-up-okta-bookmark-app).
{% endhint %}
## Set up Okta
{% hint style="info" %}
To set up Okta SSO, you need to be an Okta admin user.
{% endhint %}
1. Login to your Okta console (using admin credentials).
2. Go to **Okta** **Applications** > **Applications.**
3. Click **Browse App Catalog.**
4. Search for DoControl and click it.
5. In the App list page, click **Add integration.**\
6. In the integration wizard go to **General Settings.**
7. Check these visibility settings:
* Do not display application icon to users
* Do not display application icon in the Okta mobile app
8. Click **Next** and **Done**.
9. In the **Application** page, go to the **Assignments** tab.
10. Click **Assign** and add the relevant people or groups to connect DoControl with Okta. Click **Done.** Make sure all listed people and groups exist in DoControl [team members](/docontrol-user-guide/system-management/settings/settings-team.md) and they all equal case sensitive.
11. Go to **Sign On** > **SAML Signing Certificates.**
12. Make sure SHA-2 is **Active**.
13. Click **Actions** > **View IdP metadata.**
14. Copy the URL.
## Connect DoControl to Okta
1. From the top-right corner in any DoControl screen, go to **Settings** > **Admin** > **SSO > Okta.**
2. For the Display name, which is displayed to DoControl users when logging in with Okta, provide a meaningful name.
3. Paste the URL in the **Metadata URL** field.
4. Click **Save.**
## Set up Okta bookmark app
{% hint style="warning" %}
To login to DoControl via the Okta dashboard, you can set up a third-party application. Since Bookmark App is provided by a third-party vendor, DoControl cannot be responsible for its support.
{% endhint %}
### Prerequisites
This procedure is optional. To set up an Okta bookmark app, you need to be an Okta admin user, and have a valid Okta connection in DoControl. If not, first [connect DoControl to Okta](#connect-docontrol-to-okta).
#### To set up a bookmark app in Okta:
1. Login to your Okta console (using admin credentials).
2. Go to **Okta Applications > Applications.**
3. Click **Browse App Catalog.**
4. Search for **Bookmark App.**
5. Click **Add integration.**
6. Rename the Bookmark App to DoControl login.
7. In DoControl, go to **Settings > Admin > SSO > Okta.**
8. Copy the login URL for the Bookmark App.
9. In Okta, paste the URL and click **Done.**
10. **Optional**: Add the DoControl logo to the Bookmark App.
11. Click **Assign** and add the relevant people or groups to connect DoControl with Okta, and click **Done**.
{% hint style="warning" %}
Make sure all the listed people and groups are the same people who were added when [setting up Okta](#set-up-okta).
{% endhint %}
The Okta dashboard is now displayed in DoControl login.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.docontrol.io/docontrol-user-guide/system-management/settings/single-sign-on-sso/okta-sso.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
to the Bookmark App.