# Okta SSO Configuration Guide (/docs/security/sso/okta-sso-guide)

## Prerequisites [#prerequisites]

Ensure you have read the [SSO Setup article](./setting-up-sso.mdx) to ensure you have configured the baseline and prepared for your IDP SSO connection.

## Configuration Steps [#configuration-steps]

_Note: this guide uses the Classic UI, which can be selected on the top-left dropdown in Okta_

![1db5530 Screen Shot 2019 09 30 At 1.56.39 PM](/images/1db5530-Screen_Shot_2019-09-30_at_1.56.39_PM.png)

1. Go to the **Applications** page

   ![D1df6c0 Screen Shot 2019 09 30 At 1.56.48 PM](/images/d1df6c0-Screen_Shot_2019-09-30_at_1.56.48_PM.png)

2. Click **Add Application**

   ![D209226 Screen Shot 2019 09 30 At 1.56.51 PM](/images/d209226-Screen_Shot_2019-09-30_at_1.56.51_PM.png)

3. Click **Create New App**.
   Under platform, select **Web**, and choose **SAML 2.0**. Click **Create**.

   ![4912f14 Screen Shot 2019 09 30 At 1.56.56 PM](/images/4912f14-Screen_Shot_2019-09-30_at_1.56.56_PM.png)

4. Name your application **Transcend**.
   You may download our App Icon [here](https://misc-assets-transcend.s3.amazonaws.com/brand/Transcend+Logo+Mark+%28Color%29.png) and click **Upload Logo**.
   Click Next.

   ![E28fa29 Screen Shot 2019 09 30 At 1.57.08 PM](/images/e28fa29-Screen_Shot_2019-09-30_at_1.57.08_PM.png)

5. Set your **Single sign on URL** to `https://api.transcend.io/saml` for the EU backend, or `https://api.us.transcend.io/saml` for the US backend
   Set **Audience URI** to `transcend`
   Set **Name ID format** to `EmailAddress`
   Set **Application username** to `Email`

   ![F068c22 Screen Shot 2019 09 30 At 2.00.21 PM](/images/f068c22-Screen_Shot_2019-09-30_at_2.00.21_PM.png)

6. Scroll down to **Attribute Statements** and set 3-5 attributes:

   - Set **Name** to `firstName`, **Name format** to `Basic`, **Value** to `user.firstName`
   - Set **Name** to `lastName`, **Name format** to `Basic`, **Value** to `user.lastName`
   - Set **Name** to `login`, **Name format** to `Basic`, **Value** to `user.login`
   - Set **Title** to `title`, **Name format** to `Basic`, **Value** to `user.title`
   - Set **Department** to `department`, **Name format** to `Basic`, **Value** to `user.department`
   - If you use Push Groups, you can also:
     Set **groups**, **Name format** to `Basic`, **Filter** to `.*` (or another filter to only expose certain groups)
   - Click Next.

   ![05c6abf Screen Shot 2021 11 21 At 11.55.42 PM](/images/05c6abf-Screen_Shot_2021-11-21_at_11.55.42_PM.png)

7. Select "I'm an Okta customer adding an internal app" and click **Finish**.

   ![Fa2b066 Screen Shot 2019 09 30 At 2.03.20 PM](/images/fa2b066-Screen_Shot_2019-09-30_at_2.03.20_PM.png)

   ![F72e0ef Screen Shot 2020 02 11 At 3.22.45 PM](/images/f72e0ef-Screen_Shot_2020-02-11_at_3.22.45_PM.png)

8. You should be redirected to the **Sign On** tab. Click **View Setup Instructions**. Copy this information into Transcend on the **Settings / SSO** tab on the Admin Dashboard.

This info is your:
   - **Identity Provider Single Sign-On URL**
   - **Identity Provider Issuer**
   - **X.509 Certificate**