> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corridor.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# SSO & Okta

> Set up single sign-on with Okta for your Corridor enterprise account.

<Note>
  SSO is available on **Enterprise** plans.
</Note>

Corridor supports SSO with Okta for customers on an enterprise plan.

## Setup

To set up Corridor SSO with Okta for your organization, follow these steps:

<Steps>
  <Step title="Open Okta Admin dashboard">
    Go to the Okta Admin dashboard and navigate to the **Applications** page.
  </Step>

  <Step title="Create app integration">
    Click **Create App Integration**, and select **OIDC - OpenID Connect** and **Web Application**.
  </Step>

  <Step title="Configure the integration">
    Name your integration, and set **Sign-in redirect URIs** to:

    ```
    https://auth.corridor.dev/login/callback
    ```
  </Step>

  <Step title="Set access permissions">
    Select **Allow everyone in your organization to access** (or the appropriate level of access for your organization). Select **Enable immediate access with Federation Broker Mode**, then click **Save**.
  </Step>

  <Step title="Copy credentials">
    Copy the **Client ID** and **Client Secret**. You'll share these securely with the Corridor team in the next step.
  </Step>

  <Step title="Complete setup with Corridor">
    Contact the Corridor team to finish enabling SSO and share your credentials over a secure channel.

    <Warning>
      Never send your **Client Secret** over email, chat, or any other unencrypted channel. Email inboxes are not secure storage, and secrets shared this way can be retained indefinitely and later exposed.
    </Warning>

    1. Email [support@corridor.dev](mailto:support@corridor.dev) to start the SSO setup. You can include your **Okta domain** (`*.okta.com`), but do **not** include your Client ID or Client Secret in the email.
    2. The Corridor team will arrange a secure, encrypted channel (for example, a one-time secret-sharing link) for you to send your **Client ID** and **Client Secret**.
    3. Share your **Client ID** and **Client Secret** only through that secure channel to complete the setup.
  </Step>
</Steps>

## Additional resources

You can also view [Okta's documentation](https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_oidc.htm) for a full set of instructions on how to set up SSO.