Set up Okta SSO for 8x8 Admin Console

Okta SSO lets your users sign in to 8x8 applications with their Okta credentials, using SAML 2.0.

Users are matched to their 8x8 account by Federation ID. By default, this is the user's 8x8 username. See Identity mapping on the Set up Single Sign-On for 8×8 Admin Console page and Configure Federation ID or Google ID in user records.

Prerequisites

Add the 8x8 application in Okta and retrieve its values on the Okta side. For detailed instructions, consult Okta's official documentation. You need to retrieve the following details from Okta to configure in 8x8:

• The Okta Sign-in URL

• The Okta Issuer URL

• The Identity Provider certificate (.cert, .cer, or .crt)

Add Okta in 8x8 Admin Console

1. Sign in to 8x8 Admin Console.

2. Go to Home > Identity and Security.

3. Enable Single Sign-On (SSO).

4. Click + Add SSO.

5. In the Add a new Single Sign-On (SSO) integration window, complete the following settings:

   1. Select Okta as the identity provider.

   2. Optional: Turn on Set this provider as default.

   3. Under Label your provider, provide a distinct descriptive name for this provider. This label identifies the provider when admins assign it to users, so clear names prevent confusion.

   4. Sign-in page URL: Paste the Okta Sign-in URL.

   5. IDP Issuer URL/URN: Paste the Okta Issuer URL.

   6. Sign-out page URL (optional): Paste your Okta sign-out URL. To return users to the 8x8 sign-in page after they sign out, append the {8x8Logout} variable.
      Example: https://YOUR_COMPANY.okta.com/login/signout?fromURI={8x8Logout}

   7. Certificate in use: Attach the Okta certificate file (.cert, .cer, or .crt).

6. Click Add.

7. Click Save on the Identity and Security page.