Overview

Dust supports Okta Single Sign-On (SSO) to manage your team's access to our platform securely and effortlessly using your existing Okta credentials. This feature simplifies user management and enhances security by centralizing authentication.

Setting up Okta Single Sign-On (SSO)

To enable SSO for Dust using Okta, follow these steps to create a custom app integration in Okta.

1. Identify an Admin:

Choose an admin with comprehensive access to the Okta admin's dashboard and Dust admin. This is necessary as enabling Okta SSO requires creating a custom integration in Okta.

2. Create a Custom App Integration in Okta

1. Navigate to the Okta admin dashboard and go to Applications > Applications.
2. Click on Create App Integration.
3. Select OIDC - OpenID Connect as the Sign-In Method.
4. Choose Web Application as the Application Type and click on Next.

1. Fill in the Required Fields
   1. App Integration Name: Enter "Dust" as the app integration name.
   2. Logo: You can find our logo here.
   3. Sign-in Redirect URIs: Enter https://dust-tt.us.auth0.com/login/callback.
   4. Sign-out Redirect URIs: Enter https://dust.tt.
   5. Select an Option for Access Control: Choose the desired option to control access to the Dust app.

On the following screen, you'll find all the necessary credentials displayed. 👋 Ensure to keep this tab open for future reference:

3. Enabling Okta Single Sign-On (SSO) in Dust

To enable SSO for Dust using Okta, follow these steps:

1. Navigate to Settings > Members in Dust.
2. If your plan allows it, you'll see an option for Active Single Sign-On.

1. To enable Okta SSO on your workspace, please provide the following details from the Okta setup step:
   1. Okta Domain
   2. Okta Client Id
   3. Okta Client Secret

📘

Don't forget to copy

Copy the "Initiate Login" URL and save it somewhere easily accessible. You'll need this URL to add the Dust app to your users' Okta dashboards.

Once you've entered this information, click on Create Okta Configuration. Okta SSO is now enabled on your workspace.

If Auto-join Workspace is enabled, all members attempting to log in to Dust using their enterprise email addresses will be automatically redirected to Okta SSO for authentication.

4. Enforcing Okta Single Sign-On (SSO) in Dust

After enabling SSO, you have the option to enforce it across the entire workspace. This means that users will no longer be able to log in using their social media accounts. Please note that enabling this setting will log out all users who are not currently using Okta, and they will be required to log back in using their Okta credentials.