Okta Single Sign-On

Antenna supports OpenID Connect (OIDC) and SP-initiated SSO via Okta.

Prerequisites

1. Make sure you are logged in to Okta as an administrator.
2. Make sure you have an existing Antenna account and organization.
3. If you used password-based authentication to sign up for Antenna and the email address you used matches your email address in Okta, please change your email address in Antenna (e.g. john.doe+email@company.com) to prevent any account verification errors.
4. Your organization must be on the Business or Enterprise plan. Our Okta integration is not available on the free trial.

Supported Features

• IdP-initiated SSO (through Third-party Initiated Login )
• SP-initiated SSO (Single Sign-On)
• Just-In-Time provisioning

For more information on the listed features, visit the Okta Glossary .

Configuration Steps

1. Go to the Antenna  integration in the Okta marketplace.
2. Click Add this integration.
3. Make sure that your user is assigned to the application in Okta.
4. On the Okta admin page, click on the Antenna application and navigate to the Sign On tab.
5. Copy the values of Issuer, Client ID, and Client Secret.
6. On app.antenna.dev , go to Organization Settings > SSO.
7. Click Configure next to Okta.
8. Paste the Issuer, Client ID, and Client Secret (from step 5) and click Save.
9. Click Activate.

Once you complete these steps, all organization members will be required to log in through Okta to access Antenna, including the administrator that set up Okta.

SP-initiated SSO

SP-initiated SSO will occur if a user has a pre-existing account for the organization and the organization admin then enables SSO. If a user logs in with a non-Okta SSO account, they will see a screen stating that they need to log in with Okta.

The sign-in process is initiated from the Antenna sign-in page .

1. From your browser, navigate to the Antenna sign-in page.
2. Enter your pre-existing sign-in credentials. After submitting, you will be asked to sign in with Okta.
3. Enter your Okta credentials (your email and password) and click Sign in with Okta.
4. If your credentials are valid, you will be redirected to the Antenna dashboard.

SP-initiated SSO also occurs when a user’s session expires. They will be shown a screen asking them to sign in with Okta to continue.

Removing Okta SSO

After activating Okta SSO, you will see the enabled connection and an option to remove it on the settings page for your organization on Antenna.

If you remove SSO from your organization, all SSO users will lose login access to Antenna. Any SSO users currently logged in will have their session expire within 8 hours.

You can add Okta SSO back at any time.