This guide walks you through setting up Okta single sign-on (SSO) for logging into Sastrify.


To set up Okta SSO as your login method in Sastrify, follow these steps:

  1. Select "Login with Okta" in your Sastrify platform.
  2. Create an app in Okta and generate the required credentials
  3. Send credentials to Sastrify.
  4. (Optional but recommended) Create a bookmark in Okta to enable IdP-initiated login


Each step is outlined below.


IN THIS ARTICLE


Step 1: Select the login method in Sastrify



  1. Go to: Settings > User & Company Data > Authentication Settings
  2. Click "Edit".
  3. Select "Login with Okta".
  4. Click "Enable SSO".


After you click Enable SSO, you’ll see a confirmation message. This also triggers an email from Sastrify with instructions to provide your Okta credentials, which you’ll need to complete Step 3.


Step 2: Create an app in Okta and generate credentials


  1. Log in to your Okta Admin Console. 
  2. Navigate to Applications > Applications.
  3. Click Create App Integration.
  4. Select the sign-in method type "OIDC - Open ID Connect" and the application type "Web Application".
  5. Set the following callback URL https://login.sastrify.com/login/callback as the sign-in indirect URL.



After you have successfully created the app integration in your organization, search for it on the Applications page.

  1. Click App Integration to open the settings page.
  2. On the General tab, the Client Credentials section.
  3. Copy the client ID and client secret


  4. Find your issuer URL by clicking your username in the top-right corner of the Okta Admin Console. The domain listed just below your name is your Issuer URL


  5. By now you should have all the required credentials: Client ID, Client Secret and Issuer URL

Step 3: Send the credentials to Sastrify


Reply to the email from Step 1 and include the following:

  • Client ID

  • Client Secret

  • Issuer URL


Once received, the Sastrify Support Team will enable your Okta SSO integration within 2 business days. You'll be notified via email when setup is complete.


Step 4: Create a bookmark in Okta (Optional but recommended)


If you'd like to log into Sastrify directly from your Okta dashboard, you can create a Bookmark App. This acts as a workaround for the lack of native IdP-initiated support. You can complete this step before SSO is fully activated.


  1. In the Okta Admin Console, go to: Applications > Browse App Catalog.


  2. Search for Bookmark App.


  3. Click the app, then click Add Integration.


  4. In the General Settings, enter a label for the external application (e.g., Sastrify) and the URL of the sign-in page for the app. Contact Sastrify Support to receive your custom login URL.


  5. Click Done to create the Bookmark App.
  6. Assign and choose the users or groups who should have access to Sastrify, as they need to be assigned to this bookmark.


Frequently Asked Questions


Q: How will I know when Okta SSO is enabled for my account?
A: Once SSO is activated, you and your team will receive an email from Sastrify confirming the change. The email will include a button or link labeled "Continue to log in". You’ll be redirected to the Sastrify login page. There, enter your email address, and you'll be redirected to Okta for authentication.



Q: Can I log in directly from my Okta dashboard?
A: Yes—if you've created a Bookmark App for Sastrify (see Step 4), you can log in directly from your Okta dashboard without going through the Sastrify login page.


Q: What data does this integration access from Okta?

A: The authentication process retrieves user profile attributes (name, email, user ID, etc.) as well as ID token, access token, and refresh token


Q: How are these tokens stored?

A: TTokens are securely cached in our identity management infrastructure. Logs of authentication events (timestamps, IPs, metadata) are also maintained for auditing and security purposes.


Q: How often is the API called?

A: Every 168 hours (7 days)


Q: Do you support SAML for Okta?
A: No, SAML is not supported for Okta.


Q: Do you support IdP-initiated flow for Okta?
A: No, native IdP-initiated flow is not supported. However, you can achieve a similar experience using the Bookmark App described in Step 4.