How do I set up Single Sign-On (SSO) with Okta?

SDS Manager also supports SAML 2.0 SSO through Okta. Broad strokes (you'll need Okta admin access):

1. In Okta, go to Applications → Applications → Create App Integration and choose SAML 2.0
2. Name the app (optionally add a logo) and continue
3. Under SAML settings, set the Single sign-on URL to https://inventory.stage.sdsmanager.com/saml2_auth/acs/, the Default RelayState to http://inventory.stage.sdsmanager.com/sso-login/, Name ID format to Email Address, and Application username to Email
4. Choose "This is an internal app that we have created" and finish
5. Open the app's Sign On tab, find the Metadata URL, and extract the App ID between /app/ and /sso/
6. Update the Audience URI (SP Entity ID) to spn: followed by that App ID
7. Add an attribute statement mapping emailAddress = user.profile.email
8. Enter Okta's IdP details into SDS Manager under Settings → Single Sign-On (SSO)
9. Create Okta groups matching SDS Manager's roles (Admin, Staff, etc.), and add a group attribute statement named "roles" with a filter matching those group names

As with Azure, this configuration mostly happens inside your own Okta tenant. The SDS Manager side is self-service, though: paste the Okta App ID and IdP details into Settings → Single Sign-On yourself, click Save, then use the Test button on that same page to confirm the connection before rolling it out to your team. See how do I set up Single Sign-On (SSO) for my team? for the same self-service steps.