---
title: Okta SSO
description: "Configure Okta SAML SSO for Spokn: set the callback URL and SPOKN_SSO audience, map user attributes, assign users, and connect your IdP in Spokn."
---

[Skip to content](https://go.getspokn.com/okta-sso#main-content)

[![Logo White](https://go.getspokn.com/hs-fs/hubfs/Logo%20White.png?width=200&height=61&name=Logo%20White.png)](https://go.getspokn.com/?hsLang=en)

Open main navigation

Close main navigation

- [Sign in](https://app.getspokn.com/login)

[Sign in](https://app.getspokn.com/login)

 Hi, what can we help you with?

- There are no suggestions because the search field is empty.

1. [Spokn Help Center](https://go.getspokn.com/?hsLang=en)
2. [Spokn SSO and IT Configuration](https://go.getspokn.com/spokn-sso-and-it-configuration?hsLang=en)

# Okta SSO

### Configuring Okta SSO

1. Load your Okta Admin console (admin.okta.com)
2. You should create an application for Spokn
3. ![](https://cdn.fs.atlas.so/resize=width:1300,fit:max/ec5c0x7PRqaE79d6fKyh)  Click “Add App,” then choose “Create New App” ![](https://cdn.fs.atlas.so/resize=width:1300,fit:max/9QaQvkgmQkCfWjoZwFXM)
4. Select SAML as sign in method
5. ![](https://cdn.fs.atlas.so/resize=width:1300,fit:max/Ef2KLHV4TO6nds8tYuv1)Give it a name, upload the Spokn logo (found [here](https://drive.google.com/open?id=17NHVFMz8OMoC8ZOi44BOo_l6NZxy909w&authuser=mariel%40getspokn.com&usp=drive_fs)), and fill out the other options.
6. ![](https://cdn.fs.atlas.so/resize=width:1300,fit:max/d7NT3ucgRmSegiGOG2At)Set the “Single sign on URL” with Spokn’s login URL:https://api.spokn.app/users/sso-web/callback
7. Type a text string to identify Spokn as an audience, use: SPOKN\_SSO
8. Set the “Name ID format” to EmailAddress option.
   
    
   
   ![](https://cdn.fs.atlas.so/resize=width:1300,fit:max/hQ3b4URyubX5cvke7xSw)
9. Now you can map user’s attributes from OKTA side to Spokn app: Please map **first\_name** -\> **user.firstName** Please map **last\_name** -\> **user.lastName** Please map **segment -\> user.department (or the department field mapped in OKTA)** Please map **company\_title -\> user.title (or the title field mapped in OKTA)**
10. ![](https://cdn.fs.atlas.so/resize=width:1300,fit:max/aT293TZGRqC1evoHhFdP)Now, submit the app.
11. You will find all of the Spokn app’s meta-data in the general tab where you go to your portal.Click on Spokn -\> Settings -\> SSO to fill out the fields as follows:
12. Set your company’s domain
    
    Entry point is represent “Embed Link” in Spokn’s app on OKTA
    
    Reply-url should be the single sign on URL
    
    You will find the certificate when you try to edit SAML settings
    
    Update the audience restriction.
13. Assign applications to users.

Assign applications to individual users so they can access them on their My Apps page. You can also assign applications to entire groups.

- In the Admin Console, go to Directory \> People.
- Click a user name in the Person & Username column.
- Select the Applications tab.
- Click Assign Applications.
- Select applications from the list or enter the application name in the Search field.
- Click Assign.
- When necessary, enter the user name, password, and complete any additional fields. The user name is not the user's Okta username, but the username they use to sign in to the application.
- Click Save and Go Back.

---

### Configuring Spokn (Final Step)

Please complete the following configuration to add SSO information to your company’s Spokn Account.

To update the portal with your SSO data:

1. Visit the Spokn portal here: [Setting SSO](https://app.getspokn.com/settings/integrations)
2. In “Integration” Tab, Select “Connect” in the “Single Sign On” Section
3. In the Domain field, set your domain (ex. getspokn.com)
4. Copy the Identifier / SP Entity ID (SPOKN\_SSO) to yours SSO SP identifier (Also called: Audience Restriction/sp Entity ID)
5. Copy Assertion Consumer service URL ([https://api.spokn.app/users/sso-web/callback](https://api.spokn.app/users/sso/callback)) to your Reply URL (Also called: SAML Callback URL or relying party URL)
6. In Single sign-on URL, paste your SSO Entry URL (Also called: SSO service location or SSO Endpoint)
   
   In Certificate, add the certificate from your IdP (no need to remove the begin/end part, it will be truncated automatically)

 

![](https://cdn.fs.atlas.so/MWacw6YQEyLsxEgw8Q3r)

 

- [Admin Setup](https://go.getspokn.com/admin-setup?hsLang=en)
- [Spokn SSO and IT Configuration](https://go.getspokn.com/spokn-sso-and-it-configuration?hsLang=en)
- [Setting Up a Video Story](https://go.getspokn.com/setting-up-a-video-story?hsLang=en)
- [Recording](https://go.getspokn.com/recording?hsLang=en)
- [Recording Best Practices](https://go.getspokn.com/recording-best-practices?hsLang=en)
- [Editing Clips](https://go.getspokn.com/editing-clips?hsLang=en)
- [AI-Powered Enhancements](https://go.getspokn.com/ai-powered-enhancements?hsLang=en)
- [Branding & Customization](https://go.getspokn.com/branding-customization?hsLang=en)
- [Sharing Your Videos](https://go.getspokn.com/sharing-your-videos?hsLang=en)
- [FAQs](https://go.getspokn.com/faqs?hsLang=en)

[![Logo Black-2](https://go.getspokn.com/hs-fs/hubfs/Logo%20Black-2.png?width=215&height=65&name=Logo%20Black-2.png "Logo Black-2")](https://www.spokn.com/)

<https://www.linkedin.com/company/getspokn/> <https://x.com/getSpokn>

© 2025 Spokn. All Rights Reserved.