Okta SSO

Set up OIDC Okta Single sign-on with Talkbase

First, create the Talkbase application in your Okta account. Next, share the OIDC Client credentials generated by Okta with our support team, and we’ll take it from there!

This guide provides step-by-step instructions for configuring a private Single Sign-On (SSO) integration with your Okta organization.

Prerequisites

To configure SSO with Okta, you must have:

  • Admin-level privileges on your Okta

Supported features

  • This implementation supports OIDC SP-initiated User Authentication. Service Provider (SP)-Initiated Authentication (SSO) Flow - This authentication flow occurs when the user attempts to log in to the application from Talkbase.
  • We also support JIT (Just in time) provisioning.

Create the Talkbase app and provide OIDC credentials

OpenID Connect (OIDC) is a standard for logging into applications. Single sign-on (SSO) login is more secure and convenient than username and password.

  1. In the Admin Console, go to Applications.
  2. Click on Create App Integration.
  3. Select OIDC - OpenID Connect as the Sign-in method and Web application as the Application type and then click on Next.
  4. Next, you’ll see the General Settings screen. Click Done to continue.
  5. Continue with the App Integration settings:
    1. Assign the name Talkbase to your application.
    2. Set Sign-in to redirect URIs to https://talkbase.io/auth/callback
    3. Delete any pre-existing default Sign-out redirect URIs
    4. Configure the Controlled access settings according to your requirements
    5. Click on Save

  6. Go to the Sign-on tab and select Issuer to an option starting with Okta URL. Save changes with Save button.

  7. Now that the app is installed on Okta’s side, you can add users or groups of users that are allowed to access Talkbase as admins via SSO.

  8. Contact our support with a request to enable Okta SSO for your workspace.
  9. Go to the General tab and copy the Client ID and Client Secret values. Then go to the Sign-on tab and copy the Issuer URL (your Okta organization URL).
  10. Submit the following form with values from the previous step.

Workspace invitations

When your workspace is set and SSO is enabled, you can invite your co-workers to your Talkbase workspace.

Invited co-workers must have access to the Talkbase app in Okta (Controlled access settings). 

  1. Sign in to Talkbase
  2. Go to Settings -> Workspace
  3. Click on the New invitation button
  4. Enter a co-worker's e-mail you want to invite to your Talkbase workspace
  5. Set the new user role in your workspace

The invited co-worker will receive an e-mail with instructions on how to join your workspace. You can learn more about workspace invitations here.

SP-initiated SSO

Your users can now sign up with Okta via the Sign in with SSO button, which is available on the sign-in page. This ensures a smooth authentication experience.  

The user first enters their email and is then redirected to Okta SSO. Upon successful authentication, they are seamlessly redirected back to Talkbase.

🎉 Your user is successfully authenticated and has access to your Talkbase workspace.