To add SSO login on your custom domain, you need to set up your Identity Provider (IdP) for IXON Cloud. This article goes into specifics on how you set up Okta.

• Create a new app integration
• Send us the required information

Create a new app integration

The IXON Cloud needs to be registered as an app in your Okta environment.

1. Before you start, check the main article SSO login on your custom domain for preparation steps.
2. Open Okta and log in.
3. Open the Admin Console.
4. Under Applications, go to Applications, and click on Create App Integration.
   
5. Select the following.

   Sign-in method	WebOIDC - OpenID Connect
   Application type	Web Application

   
6. Click Next.
7. Select and enter the following.

   App integration name	Enter a descriptive name. For example, "IXON Cloud SSO".
   Proof of possession	Leave this empty.
   Grant type	Select only Authorization Code. Do not select other options.
   Sign-in redirect URIs	Enter "https://api.ayayot.com/sso/redirect/2".
   Sign-out redirect URIs	Leave empty.
   Trusted Origins Base URIs	Leave empty.
   Controlled access	Select Limit access to selected groups.
   Selected group(s)	Select the group that you want to allow login through the SSO login button. Note that regardless of your selection here, only users in your IXON Cloud company will be able to access your IXON Cloud company. If someone has an Okta account and is part of the selected group, but is not a user in your IXON Cloud company, they do not have access.

   
8. Click Save.
9. You will automatically be redirected to your newly created app integration's details. Open the General tab and copy the Client ID and Client secret. You will need them later.
   

Send us the required information

You've prepared your Okta environment. Now, we require specific information from your environment to complete the SSO login button setup.

10. Contact us and send us the following information securely. If you do not already have a means to send data securely, you can create an encrypted zip file and send us the password separately.

    IXON Cloud company name	This information can be found in IXON Cloud at Admin > Identity. Enter your company name.
    IXON Cloud company ID	This information can be found in IXON Cloud at Admin > Identity. Enter your company ID.
    Provider	Okta
    Instance URL	Enter your Okta instance URL. This is the following URL. Replace INSTANCE_NAME with your Okta instance name. https://INSTANCE_NAME.okta.com
    Client ID	Enter your Client ID from step 9.
    Client secret	Enter your Client secret from step 9.
    Login name	The text that will be displayed in the SSO login button. Enter the text you would like to display. This needs to start with "Log in with".
    Login icon	The icon that will be displayed in the SSO login button. Specify the icon you would like to display. In case of no icon, state "No icon". In case of a custom icon, like your company logo, attach it in .png format.
    Test credentials	We request (temporary) login credentials to validate the SSO login. While this is optional, it has proven to be beneficial and often speed up the deployment of a functional SSO login button. If you choose to not provide credentials, you will need to validate the SSO login once we have completed the setup.

11. Please wait for us to process your request and complete the setup. This may take several business days.