# Okta (Pro)

DefectDojo Pro supports login via Okta. Open-source DefectDojo does not include SSO — see [Authorized Users](https://docs.defectdojo.com/admin/user_management/os__authorized_users/) for open-source access control.

## Prerequisites

Complete the following steps in Okta before configuring DefectDojo:

1. Sign in or create an account at [Okta](https://www.okta.com/developer/signup/).
2. Go to **Applications** and click **Add Application**.

3. Select **Web Applications**.

4. Under **Login Redirect URLs**, add your DefectDojo callback URL. Also check the **Implicit** box.

5. Click **Done**.

6. From the **Dashboard**, note the **Org-URL**.

7. Open the newly created application and note the **Client ID** and **Client Secret**.

## Configuration

In DefectDojo, go to **Enterprise Settings > OAuth Settings**, select **Okta**, and fill in the form:

- **Okta OAuth Key** — enter your **Client ID**
- **Okta OAuth Secret** — enter your **Client Secret**
- **Okta Tenant ID** — enter your Org-URL in the format `https://your-org-url/oauth2`

Check **Enable Okta OAuth** and submit the form. A **Login With Okta** button will appear on the login page.