> For the complete documentation index, see [llms.txt](https://docs.multitudes.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.multitudes.com/configuration-and-setup/single-sign-on-sso.md).

# Single Sign On (SSO)

We offer SSO through Okta. To enable this, you'll need to be on our Enterprise plan; reach out to <support@multitudes.com> to kick this off. We'll give you a  connection name that you'll need during the set up process.&#x20;

{% hint style="info" %}
You'll need the connection name from Multitudes for SSO setup, so don't continue until you have that. &#x20;
{% endhint %}

First, create a new application in Okta. For this, an Okta administrator will need to:

1. **Create a new app**
   1. Choose OIDC as the sign-in method, and Web Application as the application type.
   2. Choose Next.

<figure><img src="https://3759751588-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F1eOL1LoKX0USQQUCSepS%2Fuploads%2F1WjFfIwzfjnHeN7QQFxg%2Fmultitudes_sso.png?alt=media&amp;token=0a86ee3c-576d-4b3a-b785-2f48a7ef55a7" alt=""><figcaption></figcaption></figure>

2. **Add information about New Web App Integration**
   1. Name the application `Multitudes`
   2. Set the sign-in redirect URI to `https://multitudes.us.auth0.com/login/callback`
   3. Set the sign-out redirect URI to `https://app.multitudes.co/login`
   4. Set the trusted origins to `https://multitudes.us.auth0.com`
   5. Select the `Skip group assignments for now` radio button&#x20;
   6. Hit Save; the application will be created&#x20;

<figure><img src="https://3759751588-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F1eOL1LoKX0USQQUCSepS%2Fuploads%2Fb6svJOhRsZ1oOISIHQww%2Fokta_new_application.png?alt=media&amp;token=bf242acb-b5a7-4584-9d30-2866e160f0f4" alt=""><figcaption></figcaption></figure>

3. **Edit the General Settings section of the new application:**&#x20;
   1. Scroll down to General Settings and choose Edit.

<figure><img src="https://3759751588-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F1eOL1LoKX0USQQUCSepS%2Fuploads%2FBcyWEjhh7dBbLgdt5lYE%2Fgeneral_settings_okta.png?alt=media&amp;token=b26df191-28f5-4234-a8ed-7d7fbae5fa1e" alt=""><figcaption></figcaption></figure>

4. **Edit Login Settings**
   1. Under Login, change the drop-down at `Login initiated by` to `Either Okta or App`.&#x20;
   2. Tick the `Display application icon to users` checkbox.
   3. Set the `Initiate login URI` to `https://app.multitudes.co/login/social?connectionType=okta-your-organisation`, replacing `okta-your-organisation` with the connection name given to you by Multitudes.
   4. Leave the `EMAIL VERIFICATION EXPERIENCE` section blank&#x20;

<figure><img src="https://3759751588-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F1eOL1LoKX0USQQUCSepS%2Fuploads%2Fep0303PSqv9cYJdsnn8A%2Fsso_confg.png?alt=media&amp;token=4814ea59-353b-4424-b0ee-99b6f1562a63" alt=""><figcaption></figcaption></figure>

5. **Tell Multitudes the app details**&#x20;
   1. We need to know the `Client ID` and `Client Secret`. These will be used to set up your Okta integration on our side, and are required for secure authentication of your users.&#x20;
   2. Copy your Okta domain — this can be found in the menu at top right of your Okta browser tab.
   3. Use 1Password or a similar tool to securely transfer the `Client ID`, `Client Secret`, and Okta domain to Multitudes.