--- title: Setting up Corporate Login/SSO for TrueContext using Okta meta_tier: Enterprise source_file: 360031149112.html url: https://docs.truecontext.com/1374411/Content/360031149112.html last_updated: '2026-06-02' word_count: 581 --- # Setting up Corporate Login/SSO for TrueContext using Okta Available on the Intelligent and Elite tiers: —Digital Intelligent Elite [?](https://truecontext.com/pricing/) ## About This article is specific to configuring Okta as a corporate login identity provider (IdP). It expands on what is discussed in the general corporate login article [here](../ProntoFormsSecurityandCompliance/Access Management/Configure SSO in ProntoForms/SetUpSSO.md). ## Setting up Okta for use with TrueContext Follow the steps below to set up Okta for use with TrueContext. We’re now TrueContext. - To support existing integrations, some items will continue to use “prontoforms” or “pf” in the domain or code. ### Create an Application in Okta 1. Set the Platform to "Web" 2. Set the Sign on method to "SAML 2.0" 3. On **General > App Settings**, specify an Application Label (for example, TrueContext). 4. In the **Configure SAML Settings**: - Single sign on URL = `https://live.prontoforms.com/saml/SSO` - Check "Use this for Recipient URL and Destination URL" - Audience URI (SP Entity ID) = *prontoforms.com/prod* - Application username is typically set to Okta username or email, but this is based on your specific configuration. In general, you need to specify the setting here such that the username returned by Okta will match the username in live.truecontext.com - You will end up with something similar to: ### Download the Identity Provider (IdP) Metadata from Okta - Download the identity provider metadata xml from Okta by selecting the **Sign on** tab, then select **Identity Provider metadata**: - Save this file for use in the next section. ## Set Up Corporate Login in TrueContext - Within live.prontoforms.com, navigate to the security tab and select **Update** within the **Single Sign-on** menu: - Provide a Team domain name. This is typically just your corporate domain name. - Specify a problem contact email - ***Optional*:** Specify a Username suffix. This is only required if you need to add a suffix to the username returned by Okta so that it matches the username within live.truecontext.com. As an example, if Okta is configured to send just the username prefix (for example, jsmith), but the TrueContext username is jsmith@acme.com, specify @acme.com as the username suffix. However, if Okta is configured to send the username as the user’s email address, and the TrueContext username is also the email address, leave the Username suffix field blank. - Select **Choose File** under the **Identity Provider Metadata** section and select the file downloaded from Okta in the section above. - Select **Update**. At this point, you’ve completed the setup of Corporate Sign-On using Okta. If you need help because of an error or other issue, review the [Technical Support Handbook](https://www.truecontext.com/wp-content/uploads/2023/11/TrueContext-Support-Handbook.pdf) before you contact Support. The handbook describes the information that the Support team needs from you. ## Allowing the tile in Okta to login to TrueContext Currently, TrueContext only supports the SP initiated flow of logging in, and not an IdP initiated flow. This means that the user must initiate the login process by going to TrueContext (either via the app or live.truecontext.com in a browser), choose *Corporate Signon*, and enter their username or team domain to initiate the correct login flow. Simply clicking the SAML TrueContext app tile in Okta will result in an Access Denied error. A workaround for this is available by creating a second TrueContext tile (Bookmark App) in Okta. For the bookmark app to work, specify the URL as: ``` https://live.prontoforms.com/security/login/saml?domain=<SSO team domain> ``` Once this is in place, you can hide the SAML TrueContext app from users view in Okta to avoid confusion.
Downloading 360031149112.md… Go back