# Okta SSO

## Prerequisites

* Ensure you have a verified domain added to your Docupilot Organisation. Learn more on adding a [Verified Domain here](https://help.docupilot.app/~/changes/459/account-setup-and-administration/managing-your-org/verified-domains).
* To enable SAML Single Sign-On (SSO) with Okta, you need to be the organization owner in Docupilot.

## Configuring Okta SSO

To enable Single Sign-On (SSO) on Docupilot using Okta, follow the steps below:

### Step 1: Connect Okta in Docupilot

<figure><img src="https://191679573-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LDwD-wIOendMUiQ8uVr%2Fuploads%2F0CQhQa2HnDCIqUnGCh2a%2FScreenshot%202025-11-06%20at%2022.09.00.png?alt=media&#x26;token=cf78ed4c-b799-4379-bdf1-28a7f3cbfd93" alt="Connect SSO on your Docupilot account"><figcaption><p>Configuring Okta SSO</p></figcaption></figure>

1. Navigate to **Login Methods** tab in your **Organization** settings.
2. Click **Connect SSO** under **SSO Login method**, and select **Okta** from the list.
3. Enter a display name for this SSO connection (for your own reference).
4. Click **Add method**.<br>

   <figure><img src="https://191679573-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LDwD-wIOendMUiQ8uVr%2Fuploads%2FoeM3Y7i1P9sJwUgdFdqy%2F1%20okta.png?alt=media&#x26;token=acb031a7-8187-4eb5-af2d-1f81920dafdd" alt=""><figcaption><p>Adding Okta SSO Method</p></figcaption></figure>

### Step 2: Configure SAML SSO in Okta

#### **A. Adding Docupilot App Integration**

1. Log in to your **Okta** **Admin Console**.
2. Navigate to the **Applications,** click **Browse App Catalog** and search for **Docupilot.**
3. Select the **Docupilot** card and click on **Add Integration.**<br>

   <div align="center" data-full-width="true"><figure><img src="https://191679573-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LDwD-wIOendMUiQ8uVr%2Fuploads%2F6JYMnAiXCRswpD7K87Lf%2F3%20okta.png?alt=media&#x26;token=72bac7a1-adaf-4dca-891d-5f1502df0fcd" alt=""><figcaption><p>Search for Docupilot on Okta</p></figcaption></figure> <figure><img src="https://191679573-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LDwD-wIOendMUiQ8uVr%2Fuploads%2FnBk52ORxdZ8NrB2nCQNe%2F4%20okta.png?alt=media&#x26;token=cd879fbf-4b16-427b-bf85-e8404687f668" alt=""><figcaption><p>Adding Docupilot Integration on Okta</p></figcaption></figure></div>

#### **B. Copy metadata from Docupilot to Okta**

In the newly added integration,

1. Under **General Settings** set a desired **Application label** *(ex: Docupilot)*
2. From Docupilot, **copy** the **Unique ID** from the set up window and **paste** it in the respective field in **Okta.**<br>

   <div align="center" data-full-width="true"><figure><img src="https://191679573-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LDwD-wIOendMUiQ8uVr%2Fuploads%2F8LZUgSWg7YLdHPt7PFfR%2FCopy%20Unique%20ID%20for%20Adding%20the%20Integration%20in%20Okta.png?alt=media&#x26;token=49ec20c1-a5cd-4f2a-ad54-9b3edd8af381" alt=""><figcaption><p>Copy Unique ID for new Okta SSO Integration</p></figcaption></figure> <figure><img src="https://191679573-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LDwD-wIOendMUiQ8uVr%2Fuploads%2FJHt6BJeBdr4N6IOAzNp8%2F5%20okta.png?alt=media&#x26;token=2dbc762b-29eb-4cb0-8d4b-a74404bbd4b7" alt=""><figcaption><p>Paste the Unique ID from Docupilot into Okta</p></figcaption></figure></div>

#### **C. Copy metadata from Okta to Docupilot**

1. In Okta, under the newly created application, navigate to **Sign On** tab and copy the **Metadata URL**.<br>

   <div align="center" data-full-width="true"><figure><img src="https://191679573-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LDwD-wIOendMUiQ8uVr%2Fuploads%2Fwbg09vlJlQm9pTHtQjgU%2FCopying%20MetaDate%20in%20Okta.png?alt=media&#x26;token=9f0f422c-26da-44f4-8b58-ee34ddc34614" alt=""><figcaption><p>Copy <strong>Metadata URL</strong> from Okta</p></figcaption></figure></div>
2. Paste **Metada URL** in Docupilot and click **Save Configuration**<br>

   <div align="center" data-full-width="true"><figure><img src="https://191679573-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LDwD-wIOendMUiQ8uVr%2Fuploads%2FjaHM94KyuQ8GtU8dXMTs%2FScreenshot%202026-02-19%20at%203.21.52%E2%80%AFPM.png?alt=media&#x26;token=e6ce10d9-1aa7-42c2-880e-66c7dcb5f6be" alt=""><figcaption><p>Paste <strong>Metada URL</strong> in Docupilot and <strong>Save Configuration</strong></p></figcaption></figure></div>
3. **Enable** the newly added SSO Configuration in Docupilot to activate it.

<figure><img src="https://191679573-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LDwD-wIOendMUiQ8uVr%2Fuploads%2F2oxoICQ0O1s1tGrChUzc%2FScreenshot%202026-02-19%20at%203.30.43%E2%80%AFPM.png?alt=media&#x26;token=48593467-5042-4317-92c4-c9f658ef963c" alt=""><figcaption></figcaption></figure>

### Step 3: Login via Okta

Add users to your Docupilot Application in Okta. Read [Assign applications to users](https://help.okta.com/en-us/content/topics/users-groups-profiles/usgp-assign-apps.htm) for detailed steps. Once assigned, users can log in to Docupilot using Okta SSO from the Organization Login page. If a user doesn't already have an account under your organization, one will be created automatically upon first login.

<figure><img src="https://191679573-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LDwD-wIOendMUiQ8uVr%2Fuploads%2FTw7VzbCjQ1caocGtpXHh%2FLogin%20Page%20for%20Okta.png?alt=media&#x26;token=21d0f25c-5d5b-4b03-aff0-6c6fa0c679e4" alt=""><figcaption><p>Login option with Okta SSO</p></figcaption></figure>

## Supported Features

Docupilot supports the following **SAML** features:

* IdP-initiated SSO
* SP-initiated SSO
* Just-In-Time (JIT) provisioning

## Supported SAML Attributes

Docupilot supports the following SAML attributes. These attributes are preconfigured in the Okta integration.

| Attribute     | Okta Mapping   | Required |
| ------------- | -------------- | -------- |
| Email address | user.userName  | Yes      |
| First name    | user.firstName | No       |
| Last name     | user.lastName  | No       |

{% hint style="info" %}
• The Okta username (user.userName) must be a valid email address.

• The email address is used as the unique user identifier in Docupilot.
{% endhint %}

## Deleting SSO Login Method

To delete the configured SSO Login method:

1. Navigate to **Login Methods** tab in your **Organization** page
2. Select the SSO method and click on **Delete Configuration**

<figure><img src="https://191679573-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LDwD-wIOendMUiQ8uVr%2Fuploads%2FT4XdT7XFfGecT9RqQz99%2FScreenshot%202026-02-19%20at%203.33.18%E2%80%AFPM.png?alt=media&#x26;token=a70e9fa9-29c0-4ddf-ade0-38606dea68a9" alt=""><figcaption></figcaption></figure>