# Okta SSO Setup

## Create Okta Group

1. Navigate to Directory Groups, and click button to Add Group
2. Specify the group name appropriately. E.g - “Telmai App Users Group”
3. Assign users who will need access to Telmai to this group

## Create Okta Application

1. Under Okta Applications, Select "Create App Integration"
2. Select the following options
   * Sign-in Method OIDC: OpenID Connect
   * Application Type: Web Application
3. Fill in the App Integration Details as follows:
   * Application Name: Name of the Application. E.g Telmai Integration App
   * Sign-in redirect URIs (provided by Telmai): Ex: <https://company.okta.com/oauth2/v1/authorize/callback>
     * Scenario 1 : If the okta tenant name is dev123456.okta.com, the URL would be <https://dev123456.okta.com/oauth2/v1/authorize/callback>
     * Scenario 2 : If the okta tenant is mapped to a domain (ex: acmecompany.okta.com), the url would be <https://acmecompany.okta.com/oauth2/v1/authorize/callback>
   * Assignments: Controlled access "Limit access to selected groups"
     * Select the group created previously
4. Save application

## Setup Application

Setup your Okta application and retrieve the following details

* Client ID
* Client Secret
* Open-Id configuration (https\://\<okta-tenant-id/domain>/.well-known/openid-configuration)

{% hint style="info" %}
You will need to share details with Telmai team to retrieve IDP ID.

Telmai team will enable SSO accordingly
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.telm.ai/telmai/authentication-and-access-control/okta-sso-setup.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.