--- title: "Set up Single sign-on (SSO) via Okta (OpenID Connect)" description: "Learn how to establish a connection using OpenID Connect protocol for SSO with Filestage" url: https://help.filestage.io/en/articles/9465128-set-up-single-sign-on-sso-via-okta-openid-connect collection: "Setup, Compatibility and Troubleshooting" updated: 2026-08-11 language: en alternates: [de, fr, es] --- # Set up Single sign-on (SSO) via Okta (OpenID Connect) Learn how to establish a connection using OpenID Connect protocol for SSO with Filestage > **Info:** This feature is available on our Enterprise plan, or as a paid add-on on our Business plan. Should you have any additional questions, please reach out to our customer support via [support@filestage.io](mailto:support@filestage.io) or via our chat. * * * _Single sign-on (SSO) lets your team log in to Filestage with the Okta account they already use every day. No extra passwords, tighter security, and full control over who can access your projects - and connecting Okta via OpenID Connect only takes a few minutes._ ## How single sign-on via OpenID Connect can help you Connecting Filestage to Okta makes logging in easier for your team and gives your admins central control over access: - **No extra passwords** - everyone signs in to Filestage with their existing Okta account. - **Central access control** - decide in Okta who can access Filestage and remove access in one place when someone leaves your organization. - **Enterprise-grade security** - your authentication policies, like multi-factor authentication, automatically apply to every Filestage login. ## How to set up SSO with OpenID Connect (via Okta) ### Step 1: Create the app integration in Okta

  1. Log in to your Okta Admin Dashboard.

  2. Navigate to Applications > Applications and click Create App Integration.

Create App Integration button in the Okta Admin Dashboard

  1. Select OIDC - OpenID Connect as the sign-in method and Web Application as the application type, then click Next.

Selecting OIDC - OpenID Connect and Web Application in Okta

  1. Enter an App integration name that helps you identify the connection (e.g. Filestage).

  2. Under Grant type, select the Authorization Code option.

  3. Add the following Sign-in redirect URI: https://api.filestage.io/auth/enterprise/callback

New Web App Integration settings in Okta with the Filestage redirect URI

  1. Under Assignments, choose who from your organization should have access to Filestage.

Assignments section with controlled access options in Okta

  1. Save the application.

  2. On the app's General page, copy the Client ID and the Client Secret. You'll also need your Okta domain URI - you can find it in the dropdown under your username/profile icon in the top right corner.

Client ID, client secret, and Okta domain in the Okta app settings
And that's it for the Okta side - with your Client ID, Client Secret, and Okta domain URI you have everything you need to connect Filestage. ### Step 2: Configure SSO in Filestage

  1. In Filestage, go to app.filestage.io/teams/security-and-privacy - this opens the security and privacy settings of your last selected team.

  2. Scroll down to the Identity and Access Management (IAM) section and click Configure SSO.

Identity and Access Management section with the Configure SSO button in Filestage

  1. Select the OpenID Connect option.

  2. Fill in the details you copied from Okta: Issuer URL (your Okta domain URI), Client ID, and Client Secret.

  3. Click Save & test configuration - the verify section will appear at the bottom of the page.

Verify your SSO configuration section with the test URL in Filestage
### Step 3: Verify your SSO configuration > **Warning:** Once the verification is completed successfully, all your team members will be required to log in to Filestage via SSO only.

  1. Copy the Test URL from the verify section.

  2. Sign out of Filestage, or open the test URL in an incognito window of your browser.

  3. Log in with your identity provider. If everything is configured correctly, the status switches to Verified and you'll see this confirmation:

Your SSO configuration has been verified successfully message in Filestage
And that's it - from now on, your team members log in to Filestage with your identity provider. 💡 What’s next? Once you’re done, see how to [manage your team members](https://help.filestage.io/en/articles/9465096-understand-and-manage-team-members.md)! Let us know if you have any questions by reaching out to us on chat or emailing us at [support@filestage.io](mailto:support@filestage.io). We're always happy to help!