Enabling Okta SSO
Okta is one of the OAuth2 SSO methods supported by Bettermode. Learn more about OAuth2 SSO and other supported OAuth2 SSO methods.
Required credentials
Before you start, gather the following credentials from your Okta organization:
Client ID: An alphanumeric string publicly exposed and used by the service API to identify the application. This is also used to build authorization URLs presented to users.
Client Secret: A secret known only to the application and the authorization server. It protects resources by granting tokens only to authorized requestors.
Okta Domain: The domain URL of your Okta organization.
Login Button Text: The text displayed on your login page for users. Example: "Log in with Okta"
Callback URL: The URL where your browser redirects after successful authentication. You will generate this during setup (see step 4 below).
Find your Okta credentials
Sign in to your Okta organization using your administrator account.
In the Admin Console, navigate to Applications > Applications.
If an app integration already exists, search for it and click to open the settings page. If you need to create a new app integration, click Create App Integration and follow the Okta instructions. Alternatively, browse the Okta app catalog and click Browse App Catalog.
On the General tab, locate the Client Credentials section.
Copy the Client ID and Client Secret values using the Copy to Clipboard button next to each field.
Scroll down and copy the Okta Domain value using the Copy to Clipboard button next to the field.
Configure OAuth2 SSO in Bettermode
Log into your Bettermode site using your admin account.
Click your profile picture in the top-right corner, then navigate to Administration > Settings > Authentication > OAuth 2.0
Click Enable OAuth2 SSO
Select Okta as your SSO provider.
Fill in all required fields with the credentials gathered earlier. All fields are mandatory.
Click Update.
Configure the callback URL in Okta
Return to your Okta application settings.
In the Sign-in redirect URI section, add your callback URL.
Your callback URL is your community URL with
/ssos/redirectappended.
Example:
Community URL:
https://community4.blogha.comCallback URL:
https://community4.blogha.com/ssos/redirect
Test your setup
Visit your community URL (example:
https://community1.blogha.com).Click the login button and authenticate using your Okta credentials.
After successful authentication, you are logged in to your community.
Okta SSO is now active.
Configure email login behavior (optional)
By default, members see both SSO and email login options. If you want members to authenticate through Okta only, disable email login.
Disable email login and registration
Click your profile picture in the top-right corner, then navigate to Administration > Settings > Authentication.
Toggle off Login & register with email.
When disabled, members will only see the Okta login option and cannot sign up using email and password.