This guide walks you through setting up Okta single sign-on (SSO) for logging into Sastrify.


To set up Okta SSO as your login method in Sastrify, follow these steps:

  1. Select "Login with Okta" in your Sastrify platform.
  2. Add Sastrify from Okta App Catalog, and generate the SSO credentials.
  3. Send credentials to Sastrify.
  4. Enable Universal Logout.
  5. (Optional but recommended) Create a bookmark in Okta to enable IdP-initiated login


Each step is outlined below.

IN THIS ARTICLE

Step 1: Select the login method in Sastrify



  1. Go to: Settings > User & Company Data > Authentication Settings
  2. Click "Edit".
  3. Select "Login with Okta".
  4. Click "Enable SSO".


After you click Enable SSO, you’ll see a confirmation message. This also triggers an email from Sastrify with instructions to provide your Okta credentials, which you’ll need to complete Step 3.

Step 2: Add Sastrify from Okta App Catalog


  1. Log in to your Okta Admin Console. 
  2. Navigate to Applications > Browse App Catalog.
  3. Search for Sastrify and add the application.
  4. Assign the users or groups that should be able to log into Sastrify.

Step 3: Retrieve SSO Credentials


After you have successfully created the app integration in your organization and assigned users or groups, search for it on the Applications page.

  1. Click App Integration to open the settings page.
  2. On the Authentication tab, the sign-on methods' OpenID Connect section.
  3. Copy the client ID and client secret. 

  4. Find your issuer URL by clicking your username in the top-right corner of the Okta Admin Console. The domain listed just below your name is your Issuer URL


  5. By now you should have all the required credentials: Client ID, Client Secret and Issuer URL. 

Step 4: Send the credentials to Sastrify


Reply to the email from Step 1 and include the following:

  • Client ID

  • Client Secret

  • Issuer URL


Once received, the Sastrify Support Team will enable your Okta SSO integration within 2 business days. 


Once the setup is complete, Sastrify will notify you via email and provide you with a connection name for the universal logout setup (Step 5).

Step 5: Complete Universal Logout setup


  1. Go to the Sastrify App in Okta > General tab.
  2. Scroll down to App Settings.
  3. Find the field "Connection Name".
  4. Enter the connection name provided by the Sastrify Support Team.
  5. Activate universal logout on the Authentication tab by checking the following option.
  6. Save the configuration.


When Universal Logout is enabled, Okta can terminate user sessions across all applications when: 

  • An administrator initiates a logout from the Okta Admin Console.
  • The Okta system detects risk and terminates sessions for security. 


This ensures that when a user is logged out of Okta, they are also logged out of Sastrify.

Step 6: Create a bookmark in Okta (Optional but recommended)


If you'd like to log into Sastrify directly from your Okta dashboard, you can create a Bookmark App. This acts as a workaround for the lack of native IdP-initiated support. You can complete this step before SSO is fully activated.


  1. In the Okta Admin Console, go to: Applications > Browse App Catalog.


  2. Search for Bookmark App.


  3. Click the app, then click Add Integration.


  4. In the General Settings, enter a label for the external application (e.g., Sastrify) and the URL of the sign-in page for the app. Contact Sastrify Support to receive your custom login URL.


  5. Click Done to create the Bookmark App.
  6. Assign and choose the users or groups who should have access to Sastrify, as they need to be assigned to this bookmark.

Frequently Asked Questions


Q: How will I know when Okta SSO is enabled for my account?
A: Once SSO is activated, you and your team will receive an email from Sastrify confirming the change. The email will include a button or link labeled "Continue to log in". You’ll be redirected to the Sastrify login page. There, enter your email address, and you'll be redirected to Okta for authentication.



Q: Can I log in directly from my Okta dashboard?
A: Yes—if you've created a Bookmark App for Sastrify (see Step 4), you can log in directly from your Okta dashboard without going through the Sastrify login page.


Q: What data does this integration access from Okta?

A: The authentication process retrieves user profile attributes (name, email, user ID, etc.) as well as ID token, access token, and refresh token


Q: How are these tokens stored?

A: TTokens are securely cached in our identity management infrastructure. Logs of authentication events (timestamps, IPs, metadata) are also maintained for auditing and security purposes.


Q: How often is the API called?

A: Every 168 hours (7 days)


Q: Do you support SAML for Okta?
 A: No, SAML is not supported for Okta.


Q: Do you support IdP-initiated flow for Okta?
A: No, native IdP-initiated flow is not supported. However, you can achieve a similar experience using the Bookmark App described in Step 4.