Okta SSO Configuration

Configure Okta single sign-on for AirOps with OAuth 2.0/OIDC.

Configure Okta as your single sign-on provider so workspace members can sign in to AirOps with their Okta credentials. This guide covers creating an OIDC web application in Okta, copying the issuer and client credentials, and adding those values to AirOps.

AirOps Okta SSO uses OAuth 2.0/OIDC. In Okta, create a web application that uses the Authorization Code flow.

How to Configure

Create the Okta app integration

1. In Okta, go to Applications.

2. Click Create App Integration.

3. Select OIDC - OpenID Connect as the sign-in method.

4. Select Web Application as the application type.

5. Click Next.

Create an OIDC app integration in Okta.

Select Web Application for the Okta application type.

Configure the Okta app settings

1. Navigate to the Single Sign On tab.

2. Set App Integration Name to AirOps.

3. Set Sign-in redirect URIs to https://app.airops.com/users/auth/okta/callback.

4. Set Sign-out redirect URIs to https://app.airops.com.

5. Set Base URIs to https://app.airops.com.

6. Choose the Okta assignments for the users or groups that should access AirOps.

7. Click Save.

Assign the AirOps application to the users or groups that need access.

Copy the issuer URL

1. In Okta, navigate to Security → API.

2. Copy the Issuer URL for the authorization server that your AirOps app uses.

3. Keep this value available as issuer_url for the AirOps configuration fields.

The issuer URL typically looks like https://your-okta-domain.okta.com/oauth2/default.

Copy the issuer URL from the Okta authorization server.

Configure Okta in AirOps

1. Sign in to AirOps at https://app.airops.com.

2. Navigate to Settings → Single Sign On → Configure.

3. Enter the Okta client credentials and endpoint URLs.

4. Click Save.

Open the Single Sign On settings in AirOps.

Enter the Okta SSO configuration values in AirOps.

Save the Okta SSO configuration.

Parameters

Field	Value
Client ID	In Okta, navigate to Applications → Your App and copy the Client ID.
Client Secret	In Okta, navigate to Applications → Your App and copy the Client Secret.
Site	Your Okta domain, such as https://dev-123456.okta.com.
Authorize URL	issuer_url/v1/authorize, such as https://dev-123456.okta.com/oauth2/default/v1/authorize.
Token URL	issuer_url/v1/token, such as https://dev-123456.okta.com/oauth2/default/v1/token.
User Info URL	issuer_url/v1/userinfo, such as https://dev-123456.okta.com/oauth2/default/v1/userinfo.

Sign In with Okta

After you save the Okta configuration, sign out of AirOps and go to https://app.airops.com/users/sign_in.

Select Sign In With Okta, enter your workspace slug, and click Proceed. You can find your workspace slug in workspace settings.

Find your workspace slug in AirOps settings.

To skip entering the workspace slug manually, use https://app.airops.com/users/sign_in?okta-workspace-slug=YOUR_WORKSPACE_SLUG.

Video Walkthrough