Setting up Okta SSO

In HelloCivic

Open Settings → SSO and copy the ACS URL and Entity ID.

In Okta

1. Open the Okta admin console → Applications → Create App Integration.
2. Pick SAML 2.0 and click Next.
3. Name the app "HelloCivic" and add a logo (optional).
4. On the next screen:
   • Single sign-on URL: paste the ACS URL.
   • Audience URI (SP Entity ID): paste the Entity ID.
   • Name ID format: EmailAddress.
5. Under Attribute Statements, add:
   • firstName → user.firstName
   • lastName → user.lastName
6. Save.

Back in HelloCivic

1. In Okta, open the new app → Sign On tab → View SAML setup instructions.
2. Copy the Identity Provider Single Sign-On URL, Identity Provider Issuer, and X.509 Certificate.
3. Paste them into the HelloCivic SSO settings.
4. Click Test connection, then Enable.

Assign users

In Okta, assign the app to the users or groups who should have access. They'll see a HelloCivic tile in their Okta dashboard.