Okta SSO

To connect your Okta tenant as an identity Provider in groundcover, you must create an OIDC application

Create Application

• Login to Okta admin portal

• Click "Applications"

• Click "Create App Integration"

  
• In "Sign-in method" section mark "OICD - OpenID Connect"

• In "Application type" section mark "Web Application"

• Press "Next"

  
• Set "App Integration name" to "groundcover"

• In "Grant type" section mark only "Authorization Code"

• Set "Sign-in redirects URIs" to "https://auth.groundcover.com/login/callback"

• In "Assignments" section select groups

• Click "Save"

  
• Copy application "Client ID" and "Client Secret"

• Contact your account representative and provide details above and your okta tenant url

• groundcover team will use above details to perform relevant actions on our side.

• Account representative will contact you to test e2e flow

Create Dashboard Link (optional)

• Click on "groundcover" application

• In "General Settings" section click "Edit"

• Set "Login initiated by" to "Either Okta or App"

• In "Application visibility" mark "Display application icon to users"

• In "Login Flow" mark "Redirect to app to initiate login (OIDC Compliant)

• Set "Initiate login URI" to "https://app.groundcover.com"

• Click "Save"

Disable social login (recommended)

After confirming SSO works with your email address, contact your groundcover representative. Ask them to disable Google and Microsoft sign-in.

This ensures authentication occurs only through your IdP.