> ## Documentation Index
> Fetch the complete documentation index at: https://docs.detail.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up SSO authentication for Detail

> Configure single sign-on for your Detail organization using OIDC or SAML, with step-by-step setup instructions for Okta OIDC and Okta SAML.

Detail supports single sign-on (SSO) so your team can sign in with your existing identity provider. Both **OIDC** and **SAML** are supported, and you can configure SSO with any provider that implements either protocol, including Okta, Azure AD, Google Workspace, and OneLogin.

To start setup, sign in to Detail and go to **Settings → Organization → Setup SSO**.

## Okta OIDC setup

Follow these steps to configure Detail to use Okta OIDC authentication.

<Steps>
  <Step title="Start setup in Detail and Okta">
    In the Detail UI, click **Setup SSO** under **Settings → Organization**.

    Then, visit the Okta admin console and click **Create App Integration**.
  </Step>

  <Step title="Choose sign-in method and application type">
    Choose **OIDC** as the sign-in method and **Web Application** as the application type.

    Name the app `Detail`.
  </Step>

  <Step title="Select grant type">
    Under **Grant type**, choose **Authorization Code**.
  </Step>

  <Step title="Configure redirect URIs">
    Enter the **sign-in redirect URI** value provided from the Detail app.

    Remove the default **sign-out redirect URI** if one is set.
  </Step>

  <Step title="Configure controlled access">
    Under **Controlled access**, select **Allow everyone in your organization to access** and **Enable immediate access with Federation Broker Mode**, then save.
  </Step>

  <Step title="Collect the values Detail needs">
    Once complete, locate three values in the newly created application:

    * The **client ID** and **client secret** are found under the **General** tab of the application.
    * The **issuer** (Okta instance URL) is located in the top right hand corner dropdown, under your email address.
  </Step>

  <Step title="Finish setup in Detail">
    Enter these values into the Detail UI to complete setup.
  </Step>
</Steps>

## Okta SAML setup

Follow these steps to configure SAML authentication with Detail.

<Steps>
  <Step title="Create the app integration in Okta">
    Visit the Okta admin console and click **Create App Integration**.
  </Step>

  <Step title="Choose SAML 2.0">
    Choose **SAML 2.0**. Name the app `Detail` and optionally add a logo.
  </Step>

  <Step title="Configure SAML settings">
    On the **Configure SAML** screen, add the **single sign-on URL** and **audience URI**. (These will be the same value, provided by Detail.)

    Update the **Name ID format** to `EmailAddress` and the **Application username** to `Email`.
  </Step>

  <Step title="Submit and open the Sign On tab">
    Click **Submit** on the Feedback screen and go straight to the **Sign On** tab for the new application.
  </Step>

  <Step title="Add attribute statements">
    On the **Sign On** tab, set up attribute statements.

    Click **Show legacy configuration** and add three statements (all **basic** format):

    | Name        | Value            |
    | ----------- | ---------------- |
    | `firstName` | `user.firstName` |
    | `lastName`  | `user.lastName`  |
    | `id`        | `user.id`        |
  </Step>

  <Step title="Finish setup in Detail">
    Copy the **Metadata URL** from Okta and paste it into the Detail UI to complete setup. You are all set to add desired users to the application in Okta.
  </Step>
</Steps>

<Note>
  The **Setup SSO** screen in Detail accepts standard OIDC and SAML configuration values from any compliant identity provider.
</Note>