> For the complete documentation index, see [llms.txt](https://docs.silkline.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.silkline.ai/configuration/sso-configuration/okta-workforce-enterprise.md).

# Okta Workforce Enterprise

Configure SSO with Okta Workforce Identity Cloud as the OIDC identity provider so users can sign in to Silkline with Okta credentials

## Overview

**Time to complete:** about 10 minutes

This document outlines the process for configuring Single Sign-On (SSO) to Silkline using your Okta Workforce Identity Cloud account. This setup allows your users to log in to Silkline with their Okta credentials, with Okta acting as the identity provider (IdP).

## Steps

These instructions will walk you through creating and configuring a new OIDC app integration within your Okta environment to facilitate SSO with Silkline. Given the multi-step nature of this configuration and the need for testing, we suggest arranging a collaborative session to go through these steps.

{% hint style="info" %}
An organization admin can complete this connection without a Silkline configuration step — see [Self-service SSO setup](/configuration/sso-configuration/self-service-sso.md). Steps 1-3 are the same either way.
{% endhint %}

### **1. Create a New App Integration in Okta**

First, you will need to log in to your Okta administrator dashboard to begin.

1. Navigate to the **Applications** section and select **Applications**.
2. Click on **Create App Integration**.
3. For the sign-in method, choose **OIDC - OpenID Connect**.
4. For the application type, select **Web Application** and proceed by clicking **Next**.

### **2. Configure the Application**

On the application settings page, you will need to input the following details:

| Field                     | Description                                                                                                                                                                  |
| ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **App integration name**  | Enter a descriptive name, such as Silkline.                                                                                                                                  |
| **Sign-in redirect URIs** | `https://auth.silkline.ai/realms/silkline/broker/<org-id>/endpoint` (production) or `https://dev-auth-gov.silkline.ai/realms/silkline/broker/<org-id>/endpoint` (test / Gov) |
| **Trusted Origins**       | `https://auth.silkline.ai` (production) or `https://dev-auth-gov.silkline.ai` (test / Gov)                                                                                   |
| **Assignments**           | Choose whether to allow everyone in your organization to access or limit access to specific groups.                                                                          |

After filling in the necessary information, click **Save** to create the application.

{% hint style="info" %}
`<org-id>` is specific to your organization. Copy the full sign-in redirect URI from **Settings → Single sign-on** in Silkline instead of assembling it by hand.
{% endhint %}

### **3. Gather Application Credentials**

Once the application is created, you will be taken to its general settings page. You will need to record the following information from the **General** tab:

* **Client ID**
* **Client Secret**

This information is crucial for the Silkline team to complete the SSO configuration on their end.

### **4. Enter or Share the Application Credentials**

To finish the connection yourself, open **Settings → Single sign-on** in Silkline, choose Okta Workforce, and enter your Okta issuer URL, Client ID, and Client Secret. The connection is live as soon as it is created — skip to step 6.

To have Silkline configure it for you, send the following to your Silkline point of contact via a secure channel, such as a password manager or encrypted messaging service:

* Client ID
* Client Secret
* Your Okta Domain (this is the issuer URL for the OpenID Connect ID Token)

### **5. Wait for Silkline to Complete Your SSO Configuration**

After you have shared the required values, the Silkline team will finalize the configuration. They will notify you once the SSO setup is ready for testing.

### **6. Test SSO Configuration**

1. Access the [Silkline application](https://app.silkline.ai/landing)
2. Initiate the login process to confirm that the SSO integration with Okta is functioning correctly