Single sign-on
Okta
Use this guide when your organization signs in with Okta. Lettermint connects to an Okta OIDC app integration.
Before you start
You need administrator access to Okta. The sign-in redirect URI configured in Okta must match the Lettermint OIDC callback URL from the SSO guide exactly.
Okta setup
- In the Okta Admin Console, create an OIDC - OpenID Connect app integration.
- Choose Web Application.
- Add the Lettermint OIDC callback URL from the SSO guide as a sign-in redirect URI.
- Assign the app to the users or groups that should access Lettermint.
- Copy the client ID and client secret.
- Note your Okta issuer base URL.
Lettermint setup
In the Lettermint SSO setup screen, choose Okta and enter:
| Field | Value |
|---|---|
| Domain | Your managed email domain, for example example.com. |
| Metadata URL | https://{tenant}.okta.com/.well-known/openid-configuration |
| Client ID | The Okta client ID. |
| Client secret | The Okta client secret. |
If you use a custom authorization server, use that issuer's discovery URL instead.