> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cedarai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta

> Configure Okta SSO for Cedar.AI with IdP- and SP-initiated flows.

## Overview

Before starting, register your Okta organization URL with Cedar.AI. Once registered, your users will transition to the new login method—notify users ahead of time.

<Steps>
  <Step title="Open ARMS and navigate to Settings">
    Sign in to ARMS, go to <b>Settings</b>, then select <b>Sign-in options</b>.
  </Step>

  <Step title="Enter tenant code (optional shortcut)">
    Enter your Cedar tenant code. With code <code>ABCD</code>, you can use <code>[https://accounts.cedarai.com/login?tenant=ABCD](https://accounts.cedarai.com/login?tenant=ABCD)</code>.
  </Step>

  <Step title="Choose Okta and configure credentials">
    Select <b>Okta</b> as the provider, then enter your organization URL, app client ID, and app client secret. Click <b>Save</b>.

    <img src="https://mintcdn.com/cedaraiinc/3XL8_nY45kQdoBAs/images/sso/okta.png?fit=max&auto=format&n=3XL8_nY45kQdoBAs&q=85&s=251d49cd31841bbbdad4da2785555a11" alt="Okta configuration" style={{maxWidth: '680px', borderRadius: '8px'}} width="850" height="622" data-path="images/sso/okta.png" />
  </Step>
</Steps>

### Features we support

* IdP-initiated SSO
* SP-initiated SSO

### Gradual rollout

If you'd like to phase in SSO while keeping a fallback to Cedar identity for select users, enable gradual rollout. See [Gradual rollout](/user-docs/sso/gradual-rollout) for details.

### Tips and troubleshooting

* Ensure the org URL format is correct, e.g., <code>companyname.okta.com</code>.
* Add the Cedar.AI integration to your Okta org and assign users who need access.
* Users must still be assigned to a Cedar user group with sufficient permissions.

<Note>Need help? Email [support@cedarai.com](mailto:support@cedarai.com).</Note>