> ## Documentation Index
> Fetch the complete documentation index at: https://docs.subframe.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Setting up Okta SSO

> Configure Okta single sign-on for your Subframe team.

<Info>
  SSO is available on the Custom plan. After completing the Okta setup, contact Subframe to enable it for your team.
</Info>

<Steps>
  <Step title="Create an app integration">
    Open **Applications** in the Okta admin console and click **Create App Integration**.

    <img src="https://mintcdn.com/subframe-59800133/UtzN_VZHB2fC7oGB/images/sso/okta/step-1.png?fit=max&auto=format&n=UtzN_VZHB2fC7oGB&q=85&s=a047f231197a81e9e11fd7941de3b631" alt="Okta Applications dashboard with the Create App Integration button" width="3456" height="996" data-path="images/sso/okta/step-1.png" />
  </Step>

  <Step title="Select SAML 2.0">
    Select **SAML 2.0**, then continue.

    <img src="https://mintcdn.com/subframe-59800133/UtzN_VZHB2fC7oGB/images/sso/okta/step-2.png?fit=max&auto=format&n=UtzN_VZHB2fC7oGB&q=85&s=f9b4485c1d9f776a37e3fdf1ca47abd6" alt="Okta app integration dialog with SAML 2.0 selected" width="3452" height="1558" data-path="images/sso/okta/step-2.png" />
  </Step>

  <Step title="Enter the app details">
    Name the app **Subframe**. You can also download and upload the Subframe logo below.

    <img src="https://mintcdn.com/subframe-59800133/UtzN_VZHB2fC7oGB/images/sso/okta/step-3.png?fit=max&auto=format&n=UtzN_VZHB2fC7oGB&q=85&s=5c03255e2bce68ca53f9f0cce2ad27b8" alt="Okta general settings form with Subframe entered as the app name" width="3456" height="1328" data-path="images/sso/okta/step-3.png" />

    <img src="https://mintcdn.com/subframe-59800133/UtzN_VZHB2fC7oGB/images/sso/okta/logo.png?fit=max&auto=format&n=UtzN_VZHB2fC7oGB&q=85&s=035b12ffa65b6b28927ca0b986b52316" alt="Subframe logo for the Okta app" width="244" height="244" data-path="images/sso/okta/logo.png" />
  </Step>

  <Step title="Configure SAML">
    Enter these values exactly:

    | Setting                                        | Value                                                |
    | ---------------------------------------------- | ---------------------------------------------------- |
    | Single sign-on URL                             | `https://api.subframe.com/auth/v1/sso/saml/acs`      |
    | Use this for Recipient URL and Destination URL | Enabled                                              |
    | Audience URI (SP Entity ID)                    | `https://api.subframe.com/auth/v1/sso/saml/metadata` |
    | Default RelayState                             | `https://app.subframe.com`                           |
    | Name ID format                                 | `EmailAddress`                                       |
    | Application username                           | Email                                                |
    | Update application username on                 | Create and update                                    |

    <img src="https://mintcdn.com/subframe-59800133/UtzN_VZHB2fC7oGB/images/sso/okta/step-4.png?fit=max&auto=format&n=UtzN_VZHB2fC7oGB&q=85&s=55b304692b07fd855593083a3748741f" alt="Okta SAML settings with Subframe's sign-on URL and Audience URI" width="3456" height="1704" data-path="images/sso/okta/step-4.png" />
  </Step>

  <Step title="Add the email attribute">
    Add an attribute statement that maps `email` to `user.email`. Other mappings are optional.

    <img src="https://mintcdn.com/subframe-59800133/UtzN_VZHB2fC7oGB/images/sso/okta/step-5.png?fit=max&auto=format&n=UtzN_VZHB2fC7oGB&q=85&s=ab4b51667643fe6804e0e223889e34c7" alt="Okta Attribute Statements with email mapped to user.email" width="3456" height="1474" data-path="images/sso/okta/step-5.png" />
  </Step>

  <Step title="Send your metadata URL to Subframe">
    Finish creating the app, then copy its **Metadata URL** and send it to your Subframe contact or [support@subframe.com](mailto:support@subframe.com).

    The URL usually follows this format:

    ```text theme={null}
    https://<okta-org>.okta.com/apps/<app-id>/sso/saml/metadata
    ```

    <img src="https://mintcdn.com/subframe-59800133/UtzN_VZHB2fC7oGB/images/sso/okta/step-6.png?fit=max&auto=format&n=UtzN_VZHB2fC7oGB&q=85&s=ab76cfe559bbedcfbda3f1af6642c50d" alt="Okta Sign On settings showing the Metadata URL" width="3456" height="1808" data-path="images/sso/okta/step-6.png" />
  </Step>

  <Step title="Test single sign-on">
    Wait for Subframe to confirm that SSO is enabled. Then ask a user to select SSO and sign in with their work email address.

    Contact your Subframe representative if sign-in does not work.
  </Step>
</Steps>


## Related topics

- [Exporting code](/design/code-mode/overview.md)
- [Overview](/learn/code-mode/overview.md)
- [Project settings](/learn/projects/project-settings.md)