> ## Documentation Index
> Fetch the complete documentation index at: https://docs.e6data.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta

> Set up Okta for seamless Single Sign-On (SSO)

* [Enable Okta](#enable-okta)
* [Login via Okta](#login-via-okta)
* [Add Users to e6data via Okta](#add-users-to-e6data-via-okta)
* [Remove Users from e6data via Okta](#remove-users-from-e6data-via-okta)
* [Disable Okta](#disable-okta)

## Enable Okta

1. Navigate to **Access Control > SSO** from the left side menu.
2. Click on **Add Identity Provider**
3. Provide a name for your Identity Provider
4. Select **Okta**
5. Click **Next**
6. Follow these steps to [create a new SAML app integration](https://help.okta.com/en-us/Content/Topics/Apps/Apps_App_Integration_Wizard_SAML.htm) in Okta.
   1. In Okta, when prompted for a **Single sign-on URL**, copy & paste the **Single sign-on URL** shown on the e6data SSO page.
   2. In Okta, when asked for an **Audience URI (SP Entity ID)**, copy & paste the **Audience URI (SP Entity ID)** shown on the e6data SSO page.
   3. In the **Attribute Statements (optional)** section create the attributes in Okta identical to those shown on the e6data SSO page. [More information on defining attribute statements can be found here.](https://help.okta.com/en-us/Content/Topics/Apps/define-attribute-statements.htm)

<Frame caption="How to enable & configure Okta">
  <iframe src="https://www.loom.com/embed/0f418073449f456b8dff951b92088792" className="w-full aspect-video rounded-xl" allowFullScreen />
</Frame>

## Login via Okta

Users can log in by:

* Clicking the **Single Sign-On (SSO)** button in the e6data platform.
* Using the [Okta end-user dashboard](https://help.okta.com/en-us/Content/Topics/Settings/new-end-user-dashboard.htm).

SuperAdmin will be able to log in using both SSO and username/password authentication.

## Add Users to e6data via Okta

Please follow [this guide from Okta to assign users](https://help.okta.com/en-us/Content/Topics/users-groups-profiles/usgp-assign-apps.htm) to the application created during SSO setup.

Once a user is added to the e6data application they will be able to [log in via the Okta](#login-via-okta) end-user dashboard.

By default, new users are assigned the Viewer role (least privilege). The user's role [should be changed](/platform/identity/users-groups-service-accounts) by the SuperAdmin or AccessAdmin after the first login.

## Remove Users from e6data via Okta

Please follow [this guide from Okta to remove user access](https://help.okta.com/en-us/Content/Topics/users-groups-profiles/usgp-unassign-apps.htm) to the application created during SSO setup.

## Disable Okta

1. Navigate to **Access Control > SSO** from the left side menu.
2. Toggle **Integrate SSO** to the disabled position.

***Important: When SSO is disabled, each user added using SSO will need to reset their password.***


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.