Explore documentation
Okta SAML setup instructions
In this guide, you're going to learn how to connect your Okta organization with Better Stack, and enable single sign-on (SSO) for you and your colleagues.
Supported features
- IdP-initiated SSO
- SP-initiated SSO
- Just-in-Time provisioning
Configuration steps
Log in to your Better Stack administrator account.
In the bottom left, click Account settings β Settings.
In the Okta SSO section, click Connect.
Copy the Integration ID field, we're going to need it in a second.
We're going to switch to the Okta dashboard now.
Sign in to your Okta organization.
Select Applications from the left menu.
Click on Browse App Catalog and look for Better Stack.
Click on Add integration, then on Done to create the integration.
Click on the Sign on tab, then next to Settings click on Edit.
Scroll down to Advanced Sign-on Settings, and input the Integration ID that you copied before.
Click Save.
Make sure to assign your user account to the Better Stack application now, via the Assignments tab - you won't be able to finish the setup otherwise.
Switch back to the Sign on tab once more.
Scroll down to SAML Signing Certificates, open the dropdown for the SHA-2 certificate, and open View IdP Metadata.
Copy the link to the metadata to the field you see back in the Better Stack settings. Alternatively, you can also input the Identity Provider Single Sign-On URL and X.509 Certificate manually.
Click on Connect - you will be redirected to the Okta Sign on page. Sign in with the account you assigned to the Better Stack application, please.
Your Single Sign On is now configured! π
Optional: For Just-In-Time Provisioning (JIT)
- Go to your Better Stack β Settings β Teams page.
- Click the 3 dots on the desired team, then click Configure.
- Add your e-mail domain to Pre-approved domains.
- Click Save changes.
Optional: SP-initiated SSO
The Okta Single Sign-On sign in URL is available in Better Stack β Settings β Single Sign-On under Sign in URL.
The URL can also be constructed as follows:
https://betterstack.com/users/sign-in/sso/okta/[integrationId]