> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trysela.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta Integration

> Create an Okta OIDC web application and share connection details with Sela for single sign-on.

## Configure SSO

<Steps>
  <Step title="Create the Okta app">
    In Okta Admin → **Applications → Applications → Create App Integration**, use these
    settings:

    1. **Sign-in method:** OIDC - OpenID Connect
    2. **Application type:** Web Application
    3. **App integration name:** e.g. `Sela`
    4. **Grant type:** Authorization Code only
    5. **Sign-in redirect URI:** `https://id.trysela.com/login/callback`
    6. **Sign-out redirect URI:** leave blank
    7. **Controlled access:** assign the users/groups who should use Sela
    8. **Save**
  </Step>

  <Step title="Share credentials with Sela">
    On the app’s **General** tab, confirm **Client authentication = Client secret**, then
    securely share:

    * **Client ID**
    * **Client Secret**
    * **Okta domain** (e.g. `your-org.okta.com`)

    Do **not** set Initiate login URI or tile visibility yet — wait until Sela confirms
    the connection is ready, then continue to step 3.
  </Step>

  <Step title="Set the Initiate login URI">
    After Sela confirms setup, open the Okta app → **General → Edit** and set:

    1. **Initiate login URI** to:

       ```text theme={null}
       https://tower.trysela.com/login/?organization_name=<your-organization-name>
       ```

       Replace `<your-organization-name>` with your Sela organization name (e.g. `acme`).
    2. **Application visibility:** enable **Display application icon to users**
    3. **Save**
  </Step>
</Steps>
