Learn how to integrate Okta SSO with your application in minutes.
Last month we have officially released the single sign-on (SSO) feature on Logto. This feature allows you to integrate your application with any SSO provider that supports the OpenID Connect (OIDC) and SAML protocol through Logto. Apart from the generic OIDC and SAML SSO connectors, we have provided a few built-in enterprise SSO connectors, including Okta, Azure AD, and Google Workspace. In this tutorial, we will show you how to integrate your Logto application with Okta SSO in minutes.
Before we start, you need to have an Okta account. If you don't have one, you can sign up for a free Okta developer account here.
Of course, you also need to have a Logto account. If you don't have one, you are very welcome to sign up for a Logto account. Logto is free for personal use. All the features are available for free dev tenants, including the SSO feature.
A well integrated Logto application is also needed. If you don't have one, please follow the integration guide to create a Logto application.
Before we proceed to the next step, we need to collect some information from the Okta side.
Fill in the application general information.
| Field Name | Description |
|---|---|
| Name | The name of the application. |
| Logo | The logo of the application. |
| Grant Type | The grant type of the application. Logto client will trigger a SSO flow on behave of a user, use the default Authorization Code grant type. |
Scope field to add additional scopes to your OAuth request. This will allow you to request for more information from the Okta OAuth server. Please refer to the Okta documentation for more details about the available scopes.logto.io as the enterprise email domain, all the users with an email address ends with @logto.io will be restricted to use the Okta SSO connector to sign-in to the Logto application.
Use the sign-in experience live preview to test the SSO integration. You can find the live preview button at the top right corner of the Sign-in Experience preview section.
A successful SSO integration will redirect the user to the Okta sign-in page. After the user successfully signed in, the user will be redirected back to the Logto's demo App.