> ## Documentation Index
> Fetch the complete documentation index at: https://getkoala.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.
# SAML SSO
> How to setup your SAML SSO integration with Koala
Koala organizations on every plan can use Sign in with Google. Organizations on the Business plan can configure additional SAML providers. This guide will walk you through how to configure SAML SSO for Okta as an example, but the steps are similar for other SAML providers.
## Okta SAML SSO
To configure Okta SAML SSO, you must:
* Be in Admin mode in Okta.
* Have admin permissions in Koala and be on the Business plan.
Now to the steps:
1. Visit the Security settings of your Koala workspace, and switch on the SAML SSO toggle.
2. Go back to Okta and create a [custom SAML application in Okta](https://help.okta.com/oag/en-us/content/topics/access-gateway/add-app-saml-pass-thru-add-okta.htm).
3. In the SAML Settings form copy the `Single-sign on URL` and `Audience URI (SP Entity ID)` from Koala to the Okta form.
4. For the attribute mappings we don't require any specific attributes, but the Application Username should be set to `Email`.
5. Click continue until the App in Okta is created.
6. Assign the app to the users or groups that should have access to Koala.
7. Now with the app in Okta created, go to the **"Sign On" tab** and click on **"More Details"** link to get the `Single Sign-On URL` and `Certificate`.
8. Go back to Koala and paste the Identity Provider `Single Sign-On URL` and the `X.509 Certificate` in the SAML SSO settings.
9. Click on Save and you are done.
After saving the SAML SSO settings, you will be logged out and will need to log back in. You have to type in your email address to initiate the SAML SSO flow.
## Notes
### Okta Group Assignments
When assigning Groups to the Okta App used on Koala's integration, make sure that the users assigned from that group are shown as "Group" type instead of "Individual". This *inconsistent scenario* could happen if a user that belongs to the group was previously assigned as an "individual", making the login process fail.
To fix this, remove all previously individually assigned users and then assign the Group you want to give access to. After that, all users in that group will be assigned to App and the type should be shown as "Group".
### Okta Attribute Statements
To correctly create and activate new users on Koala using Okta's info, you should configure the [Attribute Statements](https://help.okta.com/oie/en-us/content/topics/apps/aiw-saml-reference.htm?cshid=csh-attribute-statements-saml) on the Okta App used on integration following these steps:
1. Click on the App settings and go to the "General" tab;
2. Click on the **Edit** button on the **SAML Settings** section;
3. Click on **Next** button to go to **2. Configure SAML** step;
4. Locate the **Attribute Statement** section and add the following fields:
* `first_name` mapped to `user.firstName`
* `last_name` mapped to `user.lastName`
* `email` mapped to `user.email`
5. Click on the Next button and then on Finish to confirm the changes.
This way, when a newly invited user logs into Koala using Okta, their profile information will be correctly read from Okta.
This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.