> ## Documentation Index
> Fetch the complete documentation index at: https://docs.appcharge.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Set Up Okta Login for the Publisher Dashboard

This article explains how to configure Okta single sign-on (SSO) for the Publisher Dashboard. After setup, users authenticate through your company's Okta tenant and don't need a separate Appcharge password.

## Before you begin

Before you begin, make sure:

* You have a Publisher Dashboard account with administrator access.
* You have an Okta account with administrator access.

## Configure in Okta

Complete the following steps to create an OIDC application in Okta and send the required connection details to Appcharge:

1. Log in to your Okta account.

2. In the **Admin Console**, go to **Applications and Resources > Applications**, and then click **Create App Integration**.

3. Complete the following fields:
   * **Sign-in method:** Select **OIDC – OpenID Connect**.
   * **Application type:** Select **Web Application**.

4. Click **Next** to continue, and then complete the following fields:
   * **General Settings**
     * **App integration name:** Enter `Appcharge Publisher Dashboard`.

     * **Grant type:** Select **Authorization Code**.

     * **Sign-in redirect URIs:** Enter the following Appcharge identity broker endpoint for receiving the login result:

       ```
       https://auth0.appcharge.com/login/callback
       ```

     * **Sign-out redirect URIs:** (Optional) Enter the following Appcharge identity broker endpoint for receiving the logout result:

       ```
       https://auth0.appcharge.com/logout
       ```

   * **Assignments**
     * **Controlled access:** Select **Allow everyone in your organization to access** so you don't need to assign individual users or groups to this Okta app.
     * **Enable immediate access:** Select the recommended option to make the app available immediately to everyone in your Okta organization. Publisher Dashboard access is still controlled by the users you add in the Publisher Dashboard.

5. Click **Save** to complete the app creation process.

6. Open your newly created app, and go to the **General** tab.

7. Under **Client Credentials**, copy the **Client ID** value.

8. Under **Client Secrets**, copy the **Secret** value.

9. Send your Okta app details to your Appcharge account manager:

   | Detail | Description | Example |
   | - | - | - |
   | Company name | Your company name. | `My Awesome Company` |
   | Okta org URL | The base URL in your browser. | `https://myawesomecompany.okta.com` |
   | Email domain(s) | The company email domain users will use to sign in. Send domains only, not full email addresses. If your company uses multiple email domains, include all of them. | `myawesomecompany.com` |
   | Client ID | The **Client ID** value you copied. | `4897ychgb47cg3go` |
   | Client secret | The **Secret** value you copied. | `h94345grbi84ytfgh80hry4380` |

   > [!WARNING]
   >
   > Send client secrets only through a secure channel.

After you send these details, your Appcharge account manager completes the integration between your Okta app and the Publisher Dashboard and notifies you when it's complete.

## Configure in Appcharge

Before users can sign in with Okta, add them to each Publisher Dashboard environment they need to access. For example, to give a user access to both sandbox and production, add the user in both environments.

Each user's Publisher Dashboard email address must match their Okta email address and use one of the email domains you sent to Appcharge.

To add Publisher Dashboard users, see [Manage User Roles and Permissions](https://docs.appcharge.com/guides/publisher-dashboard/manage-user-roles-and-permissions.md).

## Test the integration

After Appcharge confirms setup, test the login flow:

1. Open your Publisher Dashboard login page.
2. Click **Continue with Okta**.
3. Enter an existing Publisher Dashboard user's email address on your domain.
4. Sign in on your company's Okta login page. Your Okta MFA policies apply.
5. Confirm you land in the Publisher Dashboard.

### Troubleshooting

Use the table below to troubleshoot common issues during testing:

| Issue | Troubleshoot |
| - | - |
| The Publisher Dashboard shows unauthorized after Okta login succeeds. | Make sure the user exists in the Publisher Dashboard with the same email address they used to sign in. If the user exists, contact your Appcharge account manager with the email address and time of the attempt. |