> For the complete documentation index, see [llms.txt](https://docs.telm.ai/telmai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.telm.ai/telmai/authentication-and-access-control/okta-sso-setup.md).

# Okta SSO Setup

## Create Okta Group

1. Navigate to Directory Groups, and click button to Add Group
2. Specify the group name appropriately. E.g - “Telmai App Users Group”
3. Assign users who will need access to Telmai to this group

## Create Okta Application

1. Under Okta Applications, Select "Create App Integration"
2. Select the following options
   * Sign-in Method OIDC: OpenID Connect
   * Application Type: Web Application
3. Fill in the App Integration Details as follows:
   * Application Name: Name of the Application. E.g Telmai Integration App
   * Sign-in redirect URIs (provided by Telmai): Ex: <https://company.okta.com/oauth2/v1/authorize/callback>
     * Scenario 1 : If the okta tenant name is dev123456.okta.com, the URL would be <https://dev123456.okta.com/oauth2/v1/authorize/callback>
     * Scenario 2 : If the okta tenant is mapped to a domain (ex: acmecompany.okta.com), the url would be <https://acmecompany.okta.com/oauth2/v1/authorize/callback>
   * Assignments: Controlled access "Limit access to selected groups"
     * Select the group created previously
4. Save application

## Setup Application

Setup your Okta application and retrieve the following details

* Client ID
* Client Secret
* Open-Id configuration (https\://\<okta-tenant-id/domain>/.well-known/openid-configuration)

{% hint style="info" %}
You will need to share details with Telmai team to retrieve IDP ID.

Telmai team will enable SSO accordingly
{% endhint %}