Set up single sign-on (SSO) for Amplitude using Okta

Amplitude provides a single sign-on integration with Okta for customers on Scholarship, Growth, or Enterprise plans.

Before you begin

For some general information about SSO, see our Help Center article on SSO in Amplitude.

In order to set up SSO, you must be an org admin for your Amplitude organization. You must also be able to configure your organization in Okta.

Set up SSO for Amplitude using Okta

To configure SSO for Amplitude using Okta, follow these steps:

1. In Okta, navigate to the admin dashboard and click Add Applications.

   
   
   

2. On the Add Application page, click Create New App.

   
   
   

3. In the modal that appears, select the SAML 2.0 radio button and click Create.

   
   
   

4. Enter a name for the app and optionally upload a logo to go with it, for easier recognition. Then click Next.

   
   
   

5. Next, you'll configure your SAML settings. Enter the single sign-on URL (ACS URL) and the audience URL (Entity ID) in the appropriate spaces. Then, from the Application username dropdown, select Email.

   
   
   

You can find the Entity ID and Assertion Consumer Service URL in Amplitude, under Settings > ORG SETTINGS > Single Sign-On settings.

6. Once the app is created, download the Identity Provider metadata (found on the Sign-On tab in Okta).

   
   
   

7. In Amplitude, navigate to Settings > ORG SETTINGS > Single Sign-On and upload the metadata file, or download it from a URL.

   
   
   

8. Save your changes to enable SSO.