# Okta Single Sign-On ## Overview Herd integrates directly with Okta Single-Sign-On in all editions of the product, helping Okta specific organizations onboard quickly. *The Herd application is not directly available on the Okta marketplace. You'll need to follow a custom app integration once inside your Okta SSO admin console.* ## Prerequisites * An active Okta SSO account * Admin level credentials within the Okta SSO admin console * Check that you have not reached your Okta app limit. *In some Okta plans, there is a cap to how many applications you can setup via SSO. Professional & Enterprise edition typically have an unlimited amount.* * As of August 2025: It's recommended that you do this live with a Herd representative as it requires a manual change on the backend by one of our engineers. ## Add Application To Okta SSO (Open ID Connect) 1. In your Okta dashboard, go to **Applications** and click **Create App Integration**.

2. Select **OIDC - OpenID Connect** as the sign-in method.

3. Choose **Web Application** as the application type.

4. Name the app something like **"Herd" or "Herd Security"** so it’s easy to identify later.

5. Select users or groups that will have access to the application. Note that this is ONLY for users that will have access to the Herd admin console. General users should not be provided access.

6. Hit **Save** when done ### Client ID and Client Secret Once the app integration is created in Okta, you'll need to share the **Client ID** and **Client Secret** with the Herd team. These fields should be automatically generated in the **Client Credentials** section. Securely share this information with the Herd team either live on the call or with a password vault access.

### Sign-In Redirect Setup 1. Once you get the confirmation from the Herd team, you'll need to add the Sign-In Redirect URLs to finish the integration. Scroll down the page to **General Settings** and select **Edit.**

2. Scroll down to the **Login** section 3. Change the Sign-In Redirect URI to your organization's login URL it should be similar to: \ `https://ORGANIZATIONID.auth.us-west-2.amazoncognito.com/oauth2/idpresponse` 1. \*Replace the `ORGANIZATIONID` with the one provided by Herd. 4. Set the **Sign-Out Redirect URI** to `https://app.herdsecurity.io` 5. The final settings should look similar to the screen below

### Set Application Image 1. Scroll to the top of your application settings. 2. Select the pencil button next to the gear icon. 3. Save the image below.

4. Place it into Okta. 5. The login will now show the picture when look at the Okta App SSO view.