> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cotool.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta Integration

> Connect Cotool to Okta for identity and access management

Cotool supports Okta SSO and lifecycle provisioning through standard **SAML 2.0** and **SCIM 2.0** configuration.

Use the full [SAML and SCIM IdP setup guide](/integrations/identity/saml-scim) for endpoint formats, supported SCIM operations, assertion requirements, and troubleshooting.

## Okta SAML setup

Create a SAML 2.0 app in Okta and use the organization-specific values from [Cotool Authentication Settings](https://app.cotool.ai/settings/saml).

| Okta field                  | Cotool value     |
| --------------------------- | ---------------- |
| Single sign-on URL          | Cotool ACS URL   |
| Recipient URL               | Cotool ACS URL   |
| Destination URL             | Cotool ACS URL   |
| Audience URI (SP Entity ID) | Cotool Entity ID |
| Name ID format              | `EmailAddress`   |
| Application username        | Email            |

After creating the app, copy Okta's IdP metadata XML or metadata URL into Cotool.

## Okta SCIM setup

Enable provisioning for the Okta app and use:

| Okta field                        | Cotool value                                           |
| --------------------------------- | ------------------------------------------------------ |
| SCIM connector base URL           | Cotool SCIM base URL                                   |
| Unique identifier field for users | `userName`                                             |
| Supported provisioning actions    | Create users, update user attributes, deactivate users |
| Authentication mode               | HTTP Header / Bearer token                             |
| Bearer token                      | Token generated in Cotool                              |

Use Okta's **Test Connector Configuration** action after saving the SCIM base URL and bearer token.