# Okta Integration

## Prerequisites

In order to configure Okta integration with Ludi you will need:

* Admin access to your Ludi account.
* Admin access to your Okta account.
* One or more authorized domains adding to your Ludi account (see end of article).
* A note of your organizations Ludi Account ID.

### How to find your Ludi Account ID

Before you begin, you will need your organization's 12 character Ludi Account ID. You can find this in the under the management menu within Ludi: <https://ludi.co/manage>

![Ludi Account ID](/files/-Mi6AcRovUTo_ct6dQ-k)

## Integration Setup

From within the Okta dashboard, choose Applications and Create App Integration. Select SAML 2.0 and press Next.\
\
Set the name as Ludi and optionally add an icon. We have prepared an Okta compatible logo image here: <https://s.ludi.co/site/logo/okta.png>

![General Settings](/files/-Mi67AS8FdKcYl8O2WGg)

Click Next.

Under SAML Settings, set the Single Sign-On URL to <https://ludi.co/login/saml> and set Audience URI (SP Entity ID) to Your Account ID (see start of document).

![SAML Settings](/files/-Mi66xo4VJgyZmSeakjQ)

Under Attribute Statements, add the following mappings:

* firstName (basic) -> user.firstName
* lastName (basic) -> user.lastName
* email (basic) -> user.email

![Attribute Statements](/files/-Mi67YPj2SkoOjTcDE0u)

Click Next.

Choose "I'm an Okta customer adding an internal app". You may optionally fill in any other fields on this form that are appropriate for your organization, they are not required for the integration to work.

Click Finish.

You should see the screen below, if not, click View Setup Instructions. The three values on the setup screen need to be added to Ludi under Management / Single Sign-On.

![Data for Ludi from Okta](/files/-Mi695SFjtAEE2jKYVZO)

![Data added to Ludi](/files/-Mi69MtkAIV0JNhaJcK7)

Once added, click Save Configuration. We recommend leaving the "Restrict login" setting off until you are sure all your team members are able to login via SSO otherwise it may block their access.

If you have not already had your authorized domains configured by a Ludi team member, please contact us on Intercom or at <contact@ludi.co> to set these up. The domains must include all domains that your team will login from.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ludi.co/management/okta-1.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
