---
schema_version: "1"
id: e2144791ba067cb010bc8c41950c9604134466028a929a35a8cd51ff348ea1da
title: Configure Okta IdP for FedRAMP Single Sign-on
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/platform_o_fedramp_okta_idp.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.platform_o_fedramp_okta_idp.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 7fa720ce131dc60c03f49babe92b8675a8825384795818c85d0ecb061a66863c
description: Users can set their own authentication using a managed Identity Provider instead of relying on local authentication for passwords and security policies. Okta single sign-on is supported using SAML 2.0 authentication.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Configure Okta IdP for FedRAMP Single Sign-on

Users can set their own authentication using a managed Identity Provider instead of relying on local authentication for passwords and security policies. Okta single sign-on is supported using SAML 2.0 authentication.

Own has a pre-built app available in Okta's Integration Network (OIN). Prepare Okta to integrate with the Own OIN app.

For more information on enabling Okta as a managed Identity Provider, review [Okta support documentation: Build a Single Sign-On (SSO) integration](https://developer.okta.com/docs/guides/build-sso-integration/saml2/main/).

1. Open Okta.
2. Navigate to the Applications page.
3. Click _Create App Integration_.
4. Select SAML 2.0 and click _Next_.
5. Enter an App name, change the App logo if desired, and click _Next_.
6. In the SAML Settings window, enter the required information and click _Next_.
    
    - Single sign-on URL: https://us2.ogc-ownbackup.com/saml/consume.
    - Audience URI (SP Entity ID): https://sso-us2.ogc-ownbackup.com.
    - Name ID format: Select _EmailAddress_ from the drop-down list.
    - Application username: Select _Email_ from the drop-down list.
7. Select the Feedback option that applies and click _Finish_. The newly created app is automatically displayed.
8. Select the _Assignments_ tab and assign users to the application.
9. Select the _Sign On_ tab to view the SAML 2.0 connection information required for enabling single sign-on. On the right of the page, click _View SAML setup instructions_.
10. A configure page opens. Download the X.509 Certificate and copy the Identity Provider Issuer.
11. Test the new app by using the Identity Provider Single Sign-On URL. Navigate to the Own Data Platform to complete the process of enabling single sign-on.